meritoo/common-bundle

Repo bus factorcaution

One contributor made all commits in the last 3 months, leaving maintenance dependent on a single active person.

Repo commit activitycaution

Only 1 commit was made in the last 3 months, which indicates limited recent development, although the recent release provides some compensating evidence.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a dependency used by applications.

Version stabilitycaution

Version 0.6.0 is not a prerelease, and recent releases contain no prerelease versions, though the pre-1.0 major version signals a less mature compatibility promise.

Workflow auditcaution

The workflow scopes permissions read-only and has no reported audit findings, but all 14 action references are unpinned, leaving them exposed to mutable upstream changes.