wikibase/data-model-serialization

Release historycaution

The latest registry release was published over seven years ago, with no releases in the last 12 months. The repository has recent activity, but this specific release is still old.

Repo bus factorcaution

All recent commits came from one contributor, creating concentration risk. Organization ownership provides some handoff capacity, but no second recent contributor is shown.

Repo commit activitycaution

The repository recorded two commits in the last three months, showing current activity, but the volume is modest and does not indicate a strong maintenance cadence.

Security policycaution

The linked repository has no security policy. This is a transparency gap, though it is less serious than evidence of abandoned maintenance or unsafe release behavior.

Workflow auditcaution

The single workflow has read-only permissions, no untrusted checkout or injection findings, and a complete audit. However, all five analyzed action references are unpinned, leaving avoidable build reproducibility risk.