datalinx/gettext-context

Release historycaution

The package has only three releases, with no release in more than three years and a median interval of about 427 days. This is a meaningful maintenance concern, though recent repository activity partly offsets the stale registry history.

Repo bus factorcaution

All three recent commits came from one contributor, leaving maintenance highly concentrated. Organization backing provides some handoff capacity but does not remove the continuity concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool is reported. This is a modest transparency gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All workflows were analyzed, but all seven action references are unpinned and the audit found a high-confidence unpinned container image. One workflow also grants top-level write access, although job-level or read-only permissions are used elsewhere.