ybelenko/ogrn

Release historycaution

The package has only two releases, with the latest published in March 2022 and none in the last 12 months. That long release gap lowers confidence in ongoing maintenance for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the absence of recent releases. This indicates stagnant maintenance, though the library's narrow scope may reduce the need for frequent changes.

Security policycaution

The linked repository has no security policy. For a small validation library this is a transparency gap rather than a severe risk, but it gives users no documented vulnerability-reporting path.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or untrusted checkout and script-injection sinks. However, all three action references are unpinned, leaving avoidable build reproducibility and action-update risk.