antonythorpe/silvershop-jsonresponse

Release historycaution

The package has been published since 2016 and released version 4.1.0 in the last 12 months, but its seven releases are spaced about 18 months apart. This suggests deliberate, infrequent maintenance rather than a rapidly evolving project.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the release history shows a recent release, the lack of current development activity raises abandonment concern.

Repo toolingcaution

Composer is used for builds, but no security scanning tool was detected. For a small PHP module this is a modest transparency and maintenance gap, not evidence of immediate unfitness.

Security policycaution

No repository security policy was found. This reduces the project's documented process for handling vulnerabilities, though it is not by itself evidence of unsafe code.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, its only action use is unpinned, which leaves that reference exposed to upstream changes.