antalaron/git-version

Release historycaution

The project has existed since November 2017 and released once in the last 12 months, with a median interval of about 299 days. That is a slow cadence but not evidence of abandonment because the latest release is recent.

Repo bus factorcaution

All two recent commits came from one contributor, leaving no demonstrated backup maintainer if that person becomes unavailable.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest gap in routine security hygiene.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed and has no dangerous triggers or audit findings, but all five action references are unpinned. The absence of a top-level permissions block is acceptable on its own.