broadway/snapshotting

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement named. This is a direct warning against taking a new dependency on the package.

Repository archiveddanger

The linked repository is archived, despite being pushed recently. An archived source repository is a severe maintenance and abandonment risk.

Repo bus factorcaution

Only one contributor made all 10 commits in the last 3 months, concentrating maintenance entirely in one person. Organization backing provides some handoff potential, but no second active contributor is shown.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, though it does not outweigh the package's abandonment indicators by itself.

Workflow auditcaution

All 8 analyzed action references are unpinned, which weakens build reproducibility. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-severity findings.