aozisik/php-turkce

Release historycaution

The package has only 3 releases since April 2018, with no releases in the last 12 months and a median interval of about 787 days. This indicates very slow maintenance, though the stable v2.1.0 release and release notes provide some maturity evidence.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the last push occurring in August 2022. This materially raises abandonment risk despite the repository not being archived.

Security policycaution

The linked repository has no security policy. This weakens vulnerability-reporting transparency, although it is a hygiene gap rather than evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or script injection, but both of its 2 action references are unpinned. The missing top-level permissions block is acceptable on its own, so the main concern is reproducibility and action-update hygiene.