delta-solutions/translations-export-import

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. Combined with no releases in the last year, this is concrete evidence of stalled recent maintenance.

Workflow auditdanger

All 12 action references are unpinned, and three workflows grant top-level write permissions. The audit also found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow; the pull_request_target trigger has no reported untrusted checkout or script-injection sink, so it is not severe on its own.

Dependency profilecaution

Six runtime dependencies include Laravel, Excel, and translation-loader components, creating meaningful compatibility and transitive-maintenance exposure for a small integration package. The profile is still coherent with the package's stated functionality.

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. This is a supply-chain-sensitive behavior, but the signal alone does not show that the script is unsafe.

Release historycaution

The package has eight releases since April 2023, but none in the last 12 months; the latest release was about 19 months ago. This suggests slowed maintenance for a dependency consumers may need to keep compatible.