andersonef/cep-promise-php

Release historydanger

The package has had only two releases, both in May 2020, with no release in over six years. This is strong evidence of a stagnant release process for a library that depends on external address services.

Repo commit activitycaution

There have been no commits and no active maintainers in the last three months, while the latest release is also over six years old. The repository is not archived, but current maintenance capacity is still weak.

Security policycaution

The repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, although it is a hygiene gap rather than evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but its one action reference is unpinned. That leaves avoidable build reproducibility and action-supply-chain risk.