marshmallow/google-analytics

Release historycaution

The package has had no registry release in about five years, with four releases total and none in the last 12 months. This is a meaningful freshness and maintenance concern despite the earlier regular release interval.

Repo bus factorcaution

All recent repository commits came from one contributor. Organization backing provides some handoff capacity, but the observed maintenance activity remains concentrated.

Repo commit activitycaution

There were only two commits in the last three months, so repository activity is light and does not fully offset the long absence of package releases.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities, though this is not by itself evidence of abandonment.

Token permissionscaution

The sole workflow lacks top-level token permissions. No write permissions were observed, but explicit least-privilege settings would provide stronger workflow hygiene.