ttpryg/catalog-engine

Release historycaution

The package is only 2 days old with two releases, so there is not yet enough history to demonstrate sustained maintenance or release reliability.

Repo commit activitycaution

No commits or active maintainers were recorded in the last 3 months, although the repository itself is only 2 days old; the short age limits what this absence can show.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented for a library handling catalog and inventory data.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned, weakening build reproducibility and update safety.