rikudou/iban

Release historycaution

The package has seven releases since 2019, but none in the last 12 months and the latest release was about three years ago. This indicates limited recent maintenance, though the project has an established release history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. This is the main abandonment risk for a dependency.

Security policycaution

The repository has no security policy. For a small library this is a transparency gap rather than a severe risk, but it leaves vulnerability-reporting expectations unclear.

Token permissionscaution

None of the three workflows declares top-level token permissions, so their authorization posture is less explicit than ideal. No workflow declares top-level write access, which limits the concern.