magiclegacy/mtgjson-client

Release historycaution

The package has eight releases since September 2020 with a typical interval of about 57 days, but no release in nearly four years. The long release gap is a meaningful maintenance concern.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the old latest release, this indicates little recent maintenance capacity.

Repository archivedcaution

The linked repository is not archived, although its last recorded push was in September 2023, which is consistent with the broader maintenance slowdown.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations and response procedures undocumented.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkout or script-injection findings, but all three action references are unpinned and one uses an archived action repository. These are workflow hygiene and supply-chain maintenance concerns.