contributte/vite

Release historycaution

Only three releases have been published over 988 days, with one release in the last 12 months and a median interval of about 362 days. This indicates a slow maintenance cadence, though it is not abandonment by itself.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This is a meaningful maintenance warning, although the repository's later push date and documented release history provide some counterweight.

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected. This is a modest hygiene gap rather than a direct dependency risk.

Version stabilitycaution

The assessed v0.3.0 release is not prerelease, but the package remains below major version 1.0. That limits maturity confidence without making the release unsuitable on its own.

Workflow auditcaution

All four workflows were analyzed with no injection, dangerous-trigger, or high-severity findings. However, all seven action references are unpinned, leaving the CI supply chain less reproducible.