ballen/cartographer

Release historycaution

The latest release was on December 28, 2022, with no releases in the last 12 months. This is a meaningful maintenance concern, although the repository was pushed recently.

Repo commit activitycaution

There were no commits and no active maintainers in the preceding three months. Combined with the old latest release, this indicates weak ongoing maintenance even though the repository has a more recent push recorded.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. This is a modest transparency and hygiene gap rather than a standalone adoption blocker.

Security policycaution

The repository has no published security policy. For a library, this reduces the clarity of vulnerability reporting and maintenance expectations.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings and no dangerous triggers or untrusted checkouts. However, all three action references are unpinned, leaving avoidable build-reproducibility and action-update risk.