aphiria/security

Release historycaution

The package has six releases over about four and a half years, but none in the last 12 months and the latest was about 15 months ago, indicating slowed delivery.

Repo commit activitycaution

There were no commits or active maintainers in the three months before collection, a concrete sign of currently limited development activity.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tool was detected; the missing scanner is a modest hygiene gap rather than evidence of abandonment.

Version stabilitycaution

The assessed version is a prerelease, and all recent releases are prereleases, so consumers should expect an API that may still change.

Workflow auditcaution

The only workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings, but its one action reference is unpinned, weakening build reproducibility.