dealnews/filter

Release historycaution

The package has had no releases in the last 12 months, despite being about 917 days old; this suggests maintenance has slowed and lowers confidence in continued support.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, reinforcing the release-history concern and indicating limited current maintenance capacity.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tool was detected; this is a modest transparency and hygiene gap for a dependency.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all four action references are unpinned, weakening build reproducibility.