scheb/yahoo-finance-api

Repo bus factorcaution

All recent commit activity came from one contributor, leaving maintenance dependent on a single active person; the repository owner is an individual rather than an organization that could more readily hand work off.

Repo commit activitycaution

The repository had one commit in the last three months, showing recent activity but a very thin maintenance cadence for a mature package.

Security policycaution

The repository has no published security policy, reducing transparency about how vulnerability reports should be handled.

Workflow auditcaution

The single workflow was fully analyzed without dangerous triggers, untrusted checkouts, or audit findings, but all 13 action references are unpinned. That weakens build reproducibility and supply-chain control without making the release unfit on its own.