descom/descommarket_common

Release historycaution

The package is about 3 years 6 months old with 22 releases, but only one release appeared in the last 12 months. That indicates slower maintenance despite the recent 1.8.0 release.

Repo commit activitycaution

The repository had zero commits and zero active maintainers during the last 3 months. The recent release partly offsets this, but the short-term maintenance gap remains a concern.

Repo toolingcaution

The project uses Composer build tooling, but no security scanning tools were detected. This is a modest transparency and maintenance gap.

Security policycaution

The linked repository has no security policy. That weakens vulnerability-reporting transparency, although it does not by itself indicate the package is unsafe.

Workflow auditcaution

All 10 analyzed action references are unpinned, creating avoidable workflow reproducibility and dependency-drift risk. The audit found no untrusted checkout, script injection, dangerous trigger, or other reported finding, which limits the severity.