aplus/helpers

Release historycaution

The package has existed since 2019 with 22 releases, but only one release in the last 12 months indicates a slower recent cadence despite the new current release.

Repo bus factorcaution

All recent commits come from one contributor, creating concentration risk; organization ownership provides some maintenance handoff capacity but does not remove the current single-contributor signal.

Repo commit activitycaution

Only one commit was recorded in the last three months from one active maintainer, showing limited recent development activity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving security hygiene less independently supported.

Workflow auditcaution

The sole workflow was fully analyzed with no injection or high-severity findings, and it does not use broad top-level write permissions. However, all four referenced actions are unpinned, leaving avoidable update and tampering risk.