codeinc/strip-accents

Release historycaution

The package has existed for over 8 years but has only three releases, with one release in the last 12 months. The recent 2.0.0 release is positive, while the sparse cadence limits evidence of sustained maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The release on the latest push date partly offsets this, but ongoing maintenance capacity remains uncertain.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tool was detected. The missing scanning is a modest hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. For a small string-processing library this is a transparency gap, but it does not outweigh the recent release, tests, and clear ownership.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. Both action references are unpinned, which weakens reproducibility and update integrity.