wikibase/javascript-api

Release historydanger

The latest release was in May 2020, with no releases in the last 12 months, indicating a substantial maintenance gap for this library.

Licensecaution

The artifact declares GPL-2.0+ and includes a license file, while the detected license is GPL-2.0; the declaration and detected text differ, though the release is clearly licensed.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance despite the repository being unarchived.

Repo package mentioncaution

The linked repository neither matches the full package name nor mentions it in its README, leaving some uncertainty about the package-to-repository relationship.

Workflow auditcaution

The audit found a high-confidence bot-conditions issue in the only workflow, where actor context may be spoofable; the pull_request_target trigger itself is ordinary, but this finding lowers workflow hygiene.