daun/composer-processwire

Release historycaution

This is the first and only release, published today, so there is no release cadence or history demonstrating sustained maintenance. Its very recent publication partly explains the lack of history but does not remove the uncertainty.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, but the repository and release were created today, making this metric insufficient to establish a long-term maintenance record rather than evidence of a collapsed project.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are reported. For this small first release, the missing scanning is a hygiene gap rather than a severe supply-chain concern.

Security policycaution

The repository has no security policy, which leaves vulnerability-reporting expectations unclear. This is a transparency gap, not evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, so their resolved code can change over time.