amethyst/cli

Release historydanger

The latest release was about six years ago, with no releases in the last 12 months. The package has 48 historical releases, but there is no recent evidence of active maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long release gap and indicating no current maintenance activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a hygiene gap, though it is less significant than the lack of recent maintenance.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting and handling vulnerabilities.

Workflow auditcaution

All six analyzed action references are unpinned, and a high-confidence finding reports an unpinned container image in the test workflow. No untrusted checkout or injection trigger was found, which limits the severity.