rakibdevs/mrz-parser

Release historycaution

The package is more than four years old but has only four releases and one release in the last 12 months; recent repository activity partly compensates for the sparse registry cadence.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a package that processes identity-document data.

Workflow auditcaution

All workflows were analyzed, but high-confidence findings identify a potentially spoofable bot condition and an unpinned container image; all eight action references are also unpinned. These are workflow hygiene risks rather than evidence that the package itself is unsafe.