ballen/plexity

Release historycaution

The package has 14 releases over roughly 11 years, but none in the last 12 months and its latest registry release was December 2022. This is a meaningful maintenance concern, despite the repository having a later push.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the long gap since the latest registry release, this indicates weak current maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a password-complexity library, that is a modest repository-hygiene gap.

Security policycaution

The repository has no security policy. For a library handling password-validation functionality, the lack of a documented vulnerability-reporting path lowers transparency.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned. The workflow also lacks a top-level permissions block, which is acceptable on its own.