arakne/swf

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, despite a recent release, leaving a meaningful maintenance-continuity concern.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected, leaving a repository hygiene gap without evidence of abandonment.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Version stabilitycaution

The release is not marked prerelease, but the package remains below version 1.0, so its API maturity is less established than a stable-major package.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 10 action references are unpinned, weakening build reproducibility and update integrity.