amethyst/attribute-schema

Release historycaution

The package has 38 releases since February 2020, but none in the last 12 months and its latest release was about two and a half years ago. This materially raises maintenance and abandonment concern.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the latest push being about two and a half years ago. This is a significant maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That leaves a meaningful repository hygiene gap, though it is not evidence of malicious behavior.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although the organization-backed repository and existing tests provide some compensating structure.

Workflow auditcaution

All three workflows were analyzed without trigger or script-injection issues, but every one of seven action references is unpinned and the audit found a high-confidence unpinned container image. This weakens build reproducibility and supply-chain hygiene.