3m5/hotspot-wizard

Release historydanger

Only two releases exist, both from October 2021, with no releases in the last five years. This is strong evidence of an unmaintained package and is only partly offset by the repository remaining unarchived.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the long release gap. This materially raises abandonment risk.

Repo toolingcaution

The project uses Composer build tooling, but no security-scanning tools were detected. This is a modest maintenance-hygiene gap rather than evidence that the release is unsafe.

Security policycaution

No repository security policy was found. This weakens vulnerability-reporting transparency, although it is a secondary concern compared with the prolonged maintenance gap.

Workflow auditcaution

The workflow was fully analyzed without dangerous triggers, untrusted checkouts, or audit findings, but both action references are unpinned. That is a reproducibility and supply-chain hygiene gap, not a severe risk by itself.