crell/transformer

Release historycaution

The latest release was over five years ago, with only two releases overall and none in the last 12 months. This materially increases abandonment risk despite the package remaining non-deprecated.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the release history showing no release in over five years. This is a meaningful maintenance concern.

Repo toolingcaution

The project uses Composer, but no security scanning tools were detected. For a small library this is a hygiene gap rather than evidence of unfitness on its own.

Security policycaution

The repository has no security policy, leaving disclosure and response expectations undocumented. This modestly reduces transparency for a dependency consumers may need to maintain.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous audit findings or untrusted checkouts, but both action references are unpinned. The missing top-level permissions block is acceptable on its own and does not create a severe concern here.