astrogoat/elevar

Release historycaution

The package has 32 releases and a typical historical median interval of about 14 days, but it had no releases in the last 12 months; this indicates a meaningful maintenance pause.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months; together with the lack of releases in the last year, this is evidence of slowed or paused maintenance.

Repo popularitycaution

The repository has 0 stars and 0 forks, with 4 watchers. This is limited supporting evidence of adoption, but popularity alone does not make a small, maintained package unhealthy.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest hygiene gap, not evidence of abandonment by itself.

Workflow auditcaution

Both workflows were analyzed with no untrusted checkout or script-injection findings, and no top-level write permissions were found. However, all 4 analyzed action references are unpinned, including a high-confidence high-severity unpinned container image, which weakens build reproducibility and supply-chain hygiene.