qbbr/locale-configurator-bundle

Release historydanger

The package has had no release in nearly four years, despite seven releases concentrated on its first day; this strongly raises abandonment risk.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, with the last push nearly three years ago, indicating stalled maintenance.

Security policycaution

The repository has no security policy, which modestly reduces vulnerability-reporting transparency for a maintained library, though it is not evidence of abandonment by itself.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both action references are unpinned, leaving a modest reproducibility and supply-chain hygiene gap.