daycry/codeigniter-language

Release historycaution

The package has only four releases since June 2021, with no release in the last 12 months and a median interval of about 634 days. The latest release is recent enough to avoid an abandonment verdict, but the slow cadence lowers confidence in ongoing maintenance.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months. Combined with the slow release history, this indicates limited current maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small PHP library this is a modest transparency and maintenance gap, not a severe risk.

Security policycaution

The repository has no security policy. This makes vulnerability reporting less clear, though the package's small scope and test coverage partly reduce the practical concern.

Workflow auditcaution

The single workflow was fully analyzed with no detected dangerous sinks or audit findings, but all four action references are unpinned. The absence of a top-level permissions block is acceptable on its own; unpinned actions remain a supply-chain hygiene concern.