bear/accept

Maintainerscaution

One registry publishing account is listed, which is a limited publishing base; the organization-backed repository provides some compensation, so this is not a severe concern.

Release historycaution

The package has only 3 releases since August 2017, with a median interval of about 4 years and 2 months; one release in the last 12 months shows it is not abandoned, but maintenance is sparse.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the sparse release cadence and indicating limited recent maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected; this is a modest transparency and maintenance gap rather than evidence of unsafe code.

Workflow auditcaution

All 3 workflows were analyzed successfully with no reported audit findings or untrusted checkout and script-injection sinks. However, all 4 action references are unpinned, leaving workflow dependencies exposed to upstream changes.