alexandre-daubois/lazy-stream

Release historycaution

The package has had no release in more than two years, after ten releases overall. That long gap lowers confidence in ongoing maintenance, though the release history shows an initially active project.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the package having gone more than two years without a release. This is a concrete abandonment concern for a library dependency.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool is configured. That is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This matters for a library intended to be integrated into other applications.

Workflow auditcaution

The workflow was fully analyzed, uses read-only permissions, and has no dangerous triggers or audit findings. However, both of its action references are unpinned, which leaves the build exposed to changes in those referenced actions.