andrey-helldar/contracts

Registry deprecationdanger

Packagist marks the entire package as abandoned and explicitly recommends dragon-code/contracts as the replacement. This is a major adoption and continuity risk even though the repository remains active.

Release historycaution

The package has 99 releases over about 5 years, but only 1 release in the last 12 months, indicating a sharply reduced release cadence. The recent latest release partly offsets but does not remove the concern.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. That suggests limited current maintenance capacity despite a recent repository push and release.

Security policycaution

No security policy was found in the repository. For a maintained library this is a transparency gap, though it is less significant than the package's abandonment notice.

Workflow auditcaution

All 5 workflows were analyzed with no audit findings, untrusted checkouts, or script injection. However, all 7 action references are unpinned and one workflow grants top-level write permissions, creating moderate workflow hygiene concerns.