aeon-php/calendar-holidays-yasumi

Repo commit activitycaution

There were no commits and no active maintainers during the last three months. Although a recent release and a push in January show prior activity, the current pause is a maintenance concern.

Repo popularitycaution

The repository has only 2 stars, 2 forks, and 2 watchers. Popularity is supporting evidence rather than a verdict, but these low figures provide little independent evidence of broad community review.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That weakens automated protection against dependency and code changes.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is not evidence of unsafe code by itself.

Workflow auditcaution

The sole workflow uses an unpinned action, which reduces build reproducibility. Its pull_request_target trigger has no untrusted checkout or script-injection sink, and the audit found no high- or medium-severity findings.