astrogoat/tolstoy

Release historycaution

The package has seven releases over about two years with a typical interval of roughly 42 days, but it has had no release in the last 12 months. That is a meaningful maintenance concern for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a hygiene gap rather than evidence that the package is unsafe.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection findings, but all three references are unpinned and the audit found a high-confidence unpinned container image. The audit also had one failed file, so it is not fully complete.