cobweb/svconnector_json

Release historycaution

The package has been maintained since 2017 with 17 releases, but only one release in the last 12 months and a median interval of about 147 days indicate a slow cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The same-day release push provides some counterevidence, but the observed maintenance window remains thin.

Repo toolingcaution

Composer and Make are used for builds, but no security scanning tools are configured, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, which makes reporting and response expectations less clear for consumers.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers, untrusted checkouts, or audit findings, but all five action references are unpinned. The absence of a top-level permissions block is acceptable on its own, so this is a workflow hygiene caution rather than a severe risk.