civicrm/composer-compile-lib

Release historycaution

The package is over six years old with nine releases and one release in the last 12 months, indicating ongoing but slow maintenance rather than abandonment.

Repo commit activitycaution

There were no commits and no active maintainers in the three months before collection, which points to quiet ongoing maintenance despite the recent release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned, weakening build reproducibility and update control.