marcelthole/geo-parser

Release historycaution

Only two releases were published, both within about 15 hours, and there have been no releases in the past two years and seven months. This materially raises abandonment risk despite the stable 2.2.1 version.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the past three months, consistent with the long release gap. The repository is not archived, but current maintenance capacity is not demonstrated.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented. This is a transparency gap, though it does not by itself make the package unfit.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but both of its two action references are unpinned. That leaves avoidable build-integrity exposure while the otherwise clean audit is compensating evidence.