wss-group/bybitapi

Release historydanger

The package has had no registry release in about 18 months despite ten releases overall. That long pause materially raises maintenance and abandonment concerns.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. This recent inactivity weakens confidence in ongoing maintenance.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap for an API client that may handle trading credentials.

Version stabilitycaution

Version 5.0.0-beta.7 is a prerelease, and all recent releases are prereleases, so consumers should expect less stability than from a stable release.

Workflow auditcaution

All 12 analyzed action uses are unpinned, reducing build reproducibility, and the audit found a high-confidence bot-condition issue in a pull_request_target workflow. No untrusted checkout or script injection was found, limiting the severity.