021/numeric

Release historycaution

Seven releases over about two and a half years show an established project, but only one release in the last 12 months indicates a slower current cadence.

Repo commit activitycaution

There were no commits and no active maintainers during the last three months, which is a meaningful sign of currently limited maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but the repository reports no security scanning tools, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so consumers have no documented process for reporting vulnerabilities or receiving security guidance.

Workflow auditcaution

The workflow is fully analyzed, uses read-only permissions, and has no detected audit findings, but all three action references are unpinned, weakening build reproducibility and supply-chain hygiene.