teltek/pumukit-import-data-bundle

Release historydanger

This package has only one release, published 7 years ago, with no releases in the last 12 months. That is strong evidence of limited ongoing maintenance for a dependency.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last 3 months. Combined with the long release gap, this raises abandonment risk.

Licensecaution

The manifest declares a proprietary license and no license file was found. This is a significant adoption and redistribution concern for a package presented as open source.

Security policycaution

The linked repository has no security policy. This weakens vulnerability-reporting transparency, although it is not by itself evidence of unsafe code.

Workflow auditcaution

The single analyzed workflow had no unsafe triggers or audit findings, but its one action reference is unpinned. That leaves avoidable build-integrity risk.