chancegarcia/git-toolkit

Registry deprecationdanger

Packagist marks the entire package as abandoned and names chancegarcia/release-scribe as its replacement. This is a direct adoption warning even though the release itself is stable.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. This is a meaningful maintenance concern for a package marked abandoned.

Security policycaution

The repository has no security policy. This is a transparency gap, though it is secondary to the package's abandonment status.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkout or script-injection findings, but all three action references are unpinned. A low-confidence cache-poisoning finding is also present, making workflow hygiene weaker without proving a severe risk.