compwright/oauth2-fieldedge

Release historycaution

The package has existed since 2022 and released twice in the last 12 months, but its median release interval is about 20 months, indicating a slow maintenance rhythm.

Repo commit activitycaution

There were no commits from any active maintainer in the last three months, although the repository was pushed for this release on August 24, 2026; this weakens confidence in continuing maintenance.

Repo toolingcaution

Composer and Make provide build tooling, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.

Workflow auditcaution

Both workflows were fully analyzed with no reported audit findings or unsafe-trigger sinks. However, all three action references are unpinned and one workflow grants top-level write permissions, creating avoidable supply-chain and token-scope hygiene concerns.