axetools/dateutil

Release historycaution

The package has made no release in nearly two years, after four releases concentrated in its first few weeks. That substantially raises maintenance and abandonment concerns for a library dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The project is not archived, but current maintenance capacity is not demonstrated.

Repo toolingcaution

The project uses Composer and Make, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The linked repository has no security policy. For a small date utility this is a limited concern, but it reduces clarity about vulnerability reporting and response.

Workflow auditcaution

All six analyzed action references are unpinned, which weakens build reproducibility and supply-chain hygiene. The audit found no untrusted checkouts, script injection, or high-severity findings, and both workflows were fully analyzed.