zhaiyuxin/japanpost

Project backingcaution

The package and repository are owned by individual accounts rather than an organization, so there is no visible organizational backing to broaden maintenance capacity.

Release historycaution

This is the package's only release, published about 381 days ago, with no releases in the last 12 months; that limits evidence of ongoing maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which weakens evidence of active maintenance even though the repository was pushed recently.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear.

Workflow auditcaution

All three workflows were analyzed with no high-confidence audit findings or untrusted checkout paths, but all nine action references are unpinned, creating a workflow reproducibility and action-substitution concern.