truelayer/client

Release historycaution

The package has 30 releases over about 4 years, but it has had no releases in the past 12 months despite a roughly 41-day historical median interval, which indicates slowed delivery.

Repo bus factorcaution

All six recent commits came from one contributor, creating concentration risk; organization ownership provides some ability to hand maintenance off, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded six commits in the past three months, showing ongoing activity, but only one active maintainer contributed them.

Workflow auditcaution

The only workflow was fully analyzed with no untrusted checkout or script-injection path, but all three action references are unpinned and the auditor reported a low-confidence cache-poisoning finding; this is a hygiene concern rather than a severe risk.