alex-kalanis/kw_paging

Release historycaution

The latest release was about two and a half years ago, with no releases in the last 12 months and a median interval of about 321 days. This is meaningful abandonment risk despite six releases over the package's lifetime.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the long gap since the last release. This weakens confidence that defects or compatibility issues will be addressed.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap, not evidence of malicious behavior.

Security policycaution

The repository has no security policy. For a small pager library this is a limited transparency gap, but it leaves vulnerability reporting and response expectations unclear.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, injection, or high-severity findings, and it avoids top-level write permissions. However, all 8 action references are unpinned, leaving avoidable build-integrity risk.