stanislas-poisson/french-postal-code

Maintainerscaution

There is one registry publisher, Stanislas Poisson, and the repository is user-owned rather than organization-backed. This leaves a thin visible maintainer base, although the release activity shows active work by that maintainer.

Release historycaution

This is the first release, published 0 days ago, so there is no demonstrated release track record yet. That limits confidence in long-term maintenance but is not evidence of abandonment by itself.

Repo commit activitycaution

The repository records 0 commits and 0 active maintainers in the last 3 months, which is a maintenance concern for a dependency. The package is newly released, so this may reflect its age rather than a collapse in activity.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers or audit findings. However, all 14 action references are unpinned, and one workflow grants top-level write permissions, creating avoidable build-integrity and token-scope weaknesses.