octools/client

Release historycaution

The latest release was about 3 years ago, with no releases in the last 12 months; only four releases exist overall. This is strong evidence of stalled maintenance, although the project is not deprecated.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, while its last push was about 3 years ago. That leaves little evidence of ongoing maintenance capacity.

Security policycaution

The repository has no security policy. For a package making API integrations, this reduces transparency about vulnerability reporting and response expectations.

Workflow auditcaution

All three workflows were analyzed, but all seven action references are unpinned and the high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target workflow has write permissions, though no untrusted checkout or script injection was detected, so this is a material hygiene concern rather than a severe standalone risk.