bcremer/flexihash

Release historycaution

The latest release was on November 20, 2024, and there were no releases in the following 12 months. Seven releases over the package's lifetime show some release history, but current maintenance is uncertain.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, consistent with activity having stopped after November 2024. For a package approaching two years without recent changes, this raises abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy. This weakens the documented process for reporting and handling vulnerabilities, although it does not by itself show that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no untrusted checkout or injection findings. However, all three action references are unpinned, leaving the build exposed to upstream action changes.