micromus/kafka-bus-outbox

Workflow auditdanger

All 12 analyzed action references are unpinned, and a high-confidence bot-conditions finding reports spoofable actor checks in the Dependabot auto-merge workflow. The pull-request target workflow has no untrusted checkout or script-injection findings, limiting the severity.

Release historycaution

The package has 13 releases, but none in the last 12 months and the latest was about 20 months ago, which is a meaningful maintenance concern.

Repo commit activitycaution

No commits or active maintainers were recorded in the last 3 months, indicating that development activity has currently stalled.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations unclear.

Version stabilitycaution

The assessed release is not a prerelease, but the package remains below a stable major version, so compatibility expectations are less mature.