devium/toml

Release historycaution

The package has eight releases over about two years, but only one in the last 12 months; its roughly four-day median interval reflects earlier activity rather than current momentum.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a meaningful sign that maintenance may have stalled.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest verification gap.

Security policycaution

The repository has no security policy, so users are given no documented process for reporting vulnerabilities or receiving fixes.

Workflow auditcaution

Both workflows were analyzed without high- or medium-confidence findings and have no dangerous triggers or untrusted checkouts, but all three action references are unpinned, weakening build reproducibility.