ballen/distical

Release historycaution

The package has 13 releases over roughly 11 years, but none in the last three years, which raises maintenance and abandonment concerns.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months, despite a recent push being observed elsewhere; this weakens evidence of ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations unspecified.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, which is a supply-chain hygiene weakness.