universal-packages/country-service

Repo commit activitydanger

There were zero commits and zero active maintainers in the past three months. For a package only 202 days old, that is a meaningful sign that maintenance may have stopped after its initial release burst.

Release historycaution

All 8 releases arrived within a concentrated five-day period, which shows initial activity but provides little evidence of sustained maintenance over the package's 202-day age.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy. This limits reporting transparency, though the package is a small data and lookup library with no other provided security signal indicating severe risk.

Workflow auditcaution

The only workflow was fully analyzed and had no detected sinks or audit findings, but it grants top-level write access and leaves both action references unpinned. Those are workflow hygiene weaknesses without an untrusted trigger or sink to make them severe.