astrogoat/gtm

Release historycaution

The package has 39 releases and a typical median interval of about 17 days, but it has had no releases in the past 12 months; this indicates a meaningful maintenance slowdown.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the past three months, consistent with the release pause and raising maintenance risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected; the repository's security policy provides some compensating transparency.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection findings, but all five action references are unpinned and a high-confidence audit found an unpinned container image, weakening build reproducibility.