bkuhl/scripture-ranges

Release historycaution

The package has eight releases since August 2025, but only one release in the last 12 months and the latest release was about nine months ago, indicating a currently quiet project.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months; with the repository last pushed about nine months ago, this is meaningful evidence of paused maintenance.

Repo toolingcaution

Composer is used for the build, but no security-scanning tool is configured. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned and the workflow has no top-level permissions block. The unpinned references are a supply-chain hygiene concern; the missing permissions block is acceptable on its own.