mapado/request-fields-parser

Licensecaution

The manifest declares a proprietary license while the artifact and repository contain an MIT license file. The release is licensed, but the mismatch creates legal ambiguity for consumers.

Release historycaution

The package has had no release in roughly two years and nine months, with zero releases in the last 12 months. Its eight-release history shows an established project, but the long current gap raises maintenance risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This weakens evidence of ongoing maintenance, although the project is not archived.

Workflow auditcaution

The workflow was fully analyzed, uses read-only permissions, and has no dangerous findings or untrusted checkouts. However, all three action references are unpinned, leaving avoidable build-reproducibility and action-substitution exposure.