dfox288/motor-core

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement identified; this is a severe adoption risk even though the linked repository remains active.

Release historycaution

The package has 69 releases but none in the last five years, with the latest registry release on October 3, 2021. Recent repository activity partly offsets abandonment concerns but not the stale published release stream.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and handling less transparent for a package with framework and application-facing code.

Workflow auditcaution

The single workflow grants top-level write permissions and uses both analyzed actions without pinning them to immutable references. No untrusted checkout, injection, or auditor findings were reported, so this is a hygiene concern rather than a severe workflow risk.