clue/socket-raw

Release historycaution

The package has a long history with 11 releases, but it has made no registry release in more than four years. That materially raises version-staleness risk despite the project's longevity.

Repo commit activitycaution

There were no commits and no active maintainers in the measured three-month period. This weakens evidence of current maintenance, although the repository's recent push and release documentation provide some compensation.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and handling procedures undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. Both of its two action references are unpinned, which is a supply-chain hygiene weakness.