alfreddagenais/l5-swagger-annotation-tag-cleanup

Release historydanger

Only two releases were published, both in January 2024, with no releases in the following two years. This indicates a very limited and inactive release history for a package consumers may depend on.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the release history showing no release in over two years. This is strong evidence of stalled maintenance.

Maintainerscaution

The registry lists one maintainer, so continuity depends on a single individual. The linked repository is also owned by a user account rather than an organization, providing no visible backing to offset that concentration.

Security policycaution

No security policy was found in the linked repository. This is a transparency gap, though it is less significant than the package's prolonged inactivity.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no high- or medium-confidence findings, but both action references are unpinned. That leaves a modest build-reproducibility and supply-chain hygiene gap.