daggerhartlab/daglab_paragraphs

Release historycaution

This is the package's first release, published 0 days ago, so there is no release track record yet; the absence of history is understandable for a new package but still limits confidence.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, but the package was only released 0 days ago, so this is an unestablished history rather than clear abandonment.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not a severe risk by itself.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but it grants top-level write permissions and both action references are unpinned, weakening release-workflow hygiene.