aplus/app

Release historycaution

The project has 48 releases over roughly five years, but only one release in the last 12 months; the latest was about eight months before collection. This indicates materially slower maintenance.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the three months before collection. Although a recent release exists, the lack of recent commit activity raises maintenance risk.

Repo issue activitycaution

Only one issue is open and there are no open pull requests, but there was no issue or pull-request activity in the last month. This is consistent with a quiet project, though not severe on its own.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanner is a modest transparency gap, not evidence of abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no high- or medium-confidence findings, no untrusted checkouts, and no script injection. However, all 4 of 4 action references are unpinned, weakening build reproducibility and update control.