wimski/nominatim-geocoding-api-client

Release historydanger

The package has had no releases in more than four years, despite four releases during its first month. This strongly suggests the project is inactive, though the stable 1.2.0 version reduces release-churn concerns.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the release history showing no release in more than four years. This is a substantial abandonment concern.

Repository archivedcaution

The repository is not archived, so it remains available for maintenance and contributions. However, its last push was in March 2022, which limits the benefit of its unarchived status.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap for a client library that handles external API requests.

Workflow auditcaution

All four workflows were analyzed successfully and contain no untrusted checkouts, script injection, or audit findings. However, all 11 action references are unpinned, weakening build reproducibility and supply-chain hygiene.