tourze/ip-collection-bundle

Dependency profilecaution

The package declares 22 runtime dependencies, creating a relatively broad dependency surface and increasing exposure to compatibility and maintenance issues.

Release historycaution

Only two releases were published, with no release in the last 12 months; the latest release is about 16 months old, indicating weak ongoing maintenance.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last 3 months, despite a more recent push recorded elsewhere; current development activity appears stalled.

Security policycaution

No repository security policy was found, reducing the project's transparency for reporting and handling security issues.

Workflow auditcaution

Both workflows were analyzed without audit findings, and one has read-only permissions, but all four action references are unpinned, leaving build inputs less reproducible.