astrogoat/data-dome

Release historycaution

The package has 11 releases over about 3 years, but none in the last 12 months; the last release was about 13 months ago. This indicates materially slowed maintenance, despite a historically regular median interval of about 45 days.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. That is a concrete sign of currently inactive development and increases the risk that issues or compatibility needs will remain unaddressed.

Repo popularitycaution

The repository has no stars or forks and only four watchers. Popularity is supporting evidence rather than a verdict, but these low counts provide little external evidence of maturity.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. The missing scanning is a hygiene gap, partly offset by the repository's security policy and workflow checks.

Workflow auditcaution

Both workflows were analyzed and no untrusted checkout or script injection was found, but the audit identified a high-confidence unpinned container image and both action references were unpinned. One file failed analysis, so the audit is not fully complete.