chialab/calendar

Release historycaution

The package has 13 releases over about four years, but none in the 12 months before collection; the latest release was about 1 year and 9 months ago. This indicates materially slowed maintenance despite a previously regular cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the three months before collection. Combined with no releases in the last 12 months, this is the strongest maintenance concern.

Repo toolingcaution

The project uses Composer build tooling, but no security scanning tools were detected. The absence of scanning is a modest hygiene gap, not evidence that the package is unsafe on its own.

Security policycaution

The repository has no security policy. For a maintained plugin this reduces disclosure transparency, though the package's tests, release notes, and organization backing provide some compensating structure.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings. However, all 11 action references are unpinned, and the auditor reported a low-confidence unpinned container image finding; this is a workflow hygiene concern rather than a severe risk.