rpungello/radar-sdk

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single registry maintainer represents a genuinely narrow project backing base.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern for a package still receiving registry releases.

Security policycaution

The repository has no security policy, leaving contributors without a documented path for reporting vulnerabilities in an API client.

Workflow auditcaution

All 9 analyzed action references are unpinned, and three workflows grant top-level write permissions. The high-confidence bot-conditions finding in the Dependabot auto-merge workflow adds workflow hygiene risk, although no untrusted checkout or script-injection sink was detected.