bluehorndigital/mojo-drupal-scaffold

Release historydanger

The package has only two releases, both published in August 2021, with no release in nearly five years. That provides strong evidence of abandonment for a project intended to keep scaffold files current.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with the package's long release gap and increasing abandonment risk.

Security policycaution

The repository has no security policy, which weakens vulnerability-reporting transparency, though this is secondary to the much older maintenance evidence.

Workflow auditcaution

The single workflow was fully audited with no dangerous findings, but all four action references are unpinned, leaving build inputs less reproducible and more exposed to upstream changes.