solido/data-transformers

Release historycaution

The package has six releases since February 2021, with one release in the last 12 months and a median interval of about seven months. This indicates slow but continuing maintenance rather than abandonment.

Repo bus factorcaution

All recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown in this period.

Repo commit activitycaution

Only one commit and one active maintainer were observed in the last three months. The recent activity is not absent, but it is thin and leaves limited evidence of ongoing maintenance capacity.

Security policycaution

The repository has no published security policy. That weakens vulnerability-reporting transparency for a package intended for API applications.

Workflow auditcaution

All eight analyzed action references are unpinned, reducing build reproducibility and increasing exposure to upstream action changes. However, all workflows were analyzed, with no dangerous triggers, untrusted checkouts, script injection, or audit findings.