cerpus/cerpushelper

Release historycaution

The package has 26 releases since October 2021, but none in the last 12 months; the latest registry release was in December 2024. This points to slowing maintenance rather than abandonment by itself.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured. Together with the older latest release, this indicates a meaningful maintenance slowdown.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling is present. For this small library, the missing scanner is a modest transparency gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy. That makes vulnerability reporting less transparent, although the available tests, license, and organization backing partly compensate.

Workflow auditcaution

All four analyzed action references are unpinned, which weakens build reproducibility. The audit also reported a low-confidence cache-poisoning pattern, but that finding is hygiene-only under the stated rules and there are no untrusted triggers or checkouts.