marshmallow/dataset-google-geotargets

Release historycaution

The latest registry release was 4 years ago, with no releases in the last 12 months. Recent repository activity partly offsets abandonment concerns, but the package's published release cadence remains stale.

Repo bus factorcaution

One contributor made all recent commits, concentrating current maintenance knowledge. Organization ownership partly compensates by providing a potential handoff path.

Repo commit activitycaution

The repository had two commits in the last 3 months, showing current activity but at a low volume for a package with no recent registry releases.

Security policycaution

The repository has no security policy. This is a modest transparency gap, though the package's limited scope and other repository tooling reduce its weight.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous audit findings or untrusted triggers, but both of its two action references are unpinned. The missing top-level permissions block is acceptable on its own, while unpinned actions remain a minor supply-chain hygiene concern.