buzzmoody/sharkordbot

Registry deprecationdanger

Packagist marks the entire package abandoned and names buzzmoody/sharkordphp as its replacement, making this release unsuitable as a new dependency despite other healthy metadata.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is strong evidence of stalled maintenance for a young package.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the source linkage is not clearly established.

Security policycaution

The repository has no security policy, leaving disclosure and response expectations undocumented; this is a transparency gap alongside the maintenance concerns.

Workflow auditcaution

All 6 analyzed action references are unpinned, and one workflow grants top-level write permissions; the audit found no untrusted checkout or script-injection path, limiting this to workflow hygiene risk.