allbox/phone-number

Release historycaution

The package is only 41 days old and has one release, so its maintenance record and compatibility history are still unproven.

Repo bus factorcaution

All three recent commits came from one contributor, creating a meaningful continuity risk; organization ownership provides some ability to hand maintenance off.

Repo commit activitycaution

Three commits in the last three months show some activity, but the small volume limits evidence of sustained maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency gap.

Workflow auditcaution

The workflow is fully analyzed, uses read-only permissions, and has no dangerous audit findings, but all three referenced actions are unpinned, weakening build reproducibility.