treehousetim/bank-holidays

Release historycaution

The latest release was published about 20 months ago, and there were no releases in the last 12 months. This indicates slowing maintenance for a package whose holiday rules may need periodic updates.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. This is a recent inactivity signal, although it does not by itself prove abandonment.

Security policycaution

The linked repository has no security policy. For a small library this is a minor transparency gap, but it provides no documented path for reporting vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted checkouts, but all 3 action references are unpinned. That is a modest reproducibility and workflow-hygiene concern rather than a severe risk here.