coral-media/ext-ta

Registry deprecationdanger

Packagist marks the entire package as abandoned and names ta-lib/ext-ta-lib as its replacement. That substantially weakens confidence in taking a dependency on this package, even though the release itself is not individually withdrawn.

Release historycaution

Only two releases exist over roughly seven months, with the latest released about seven months ago. This is limited history for judging long-term maintenance, though the package is still relatively young.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. That is consistent with a project that may have stopped receiving maintenance.

Repo package mentioncaution

The linked repository name does not match coral-media/ext-ta and its README does not mention the package. Organization backing makes a monorepo or publishing-layout explanation possible, but the package-to-source relationship is still less transparent.

Workflow auditcaution

Both analyzed workflows grant top-level write permissions, and all 10 action references are unpinned. No untrusted triggers, injection sinks, or auditor findings were reported, so this is a hygiene concern rather than a severe workflow risk.