abcaeffchen/sepa-documentor

Release historycaution

The package has only 3 releases since November 2017, with no release in roughly 20 months and a median interval of about 3.6 years. This is a meaningful maintenance concern despite the recent 3.0.0 release.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. Combined with the sparse release history, this points to limited ongoing maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy. For a package that processes SEPA-related data, the absence reduces transparency around vulnerability reporting.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no dangerous sinks or audit findings. However, all 3 action references are unpinned, leaving build inputs less reproducible and more exposed to upstream changes.