netresearch/contexts_geolocation

Lifecycle scriptscaution

A post-autoload-dump install-time script runs during installation, adding some execution surface, but the signal provides no evidence that it performs unsafe actions.

Release historycaution

The package has only 6 releases across about 9 years and a median interval of about 685 days, although 2 releases in the last 12 months show recent activity.

Repo bus factorcaution

One contributor made all 32 recent commits, leaving maintenance highly concentrated; organization backing provides some handoff capacity but no second active contributor is shown.

Repo commit activitycaution

The repository recorded 32 commits in the last 3 months, showing strong recent activity, but only one active maintainer produced them.

Workflow auditcaution

All 9 workflows were analyzed, all use read-only permissions, and no audit findings or untrusted checkout or script-injection paths were reported. However, 19 of 20 action references are unpinned, weakening build reproducibility and update integrity.