devscast/maxicash

Registry deprecationdanger

Packagist marks the entire package as abandoned, which is a significant adoption and maintenance risk even though the listed replacement is the same package name.

Repo commit activitycaution

Only two commits from one active maintainer were recorded in the last three months, indicating limited recent development capacity despite the recent release.

Workflow auditcaution

All 11 analyzed action references are unpinned, weakening build reproducibility. The low-confidence cache-poisoning finding is hygiene only, while read-only permissions and complete audit coverage are compensating positives.