bebat/console-color

Release historycaution

The package has only three releases and no registry release in about three years. That is a meaningful maintenance concern, although the latest release included housekeeping and release notes.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. Combined with the long gap since the latest registry release, this lowers confidence in ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. For a small library this is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and handling expectations undocumented.

Workflow auditcaution

All four analyzed action references are unpinned, which weakens build reproducibility. The audit's low-confidence cache-poisoning finding is hygiene-level only, and the workflow has no untrusted checkout or script-injection sink.