zerodahero/address-normalization

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. The recent release and merged pull request provide some counterevidence, but current development activity remains thin.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected. That leaves a modest gap in the project's ongoing security hygiene.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, though it is not evidence that the package is unsafe.

Workflow auditcaution

The workflow was fully analyzed, uses read-only permissions, and has no detected high-confidence findings or untrusted execution paths. However, both of its action references are unpinned, leaving a supply-chain hygiene gap.