dhii/validator

Release historydanger

This package has only one release, published about 5 years 8 months ago, with no releases in the last 12 months. That is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with the old release history, this indicates inactive maintenance.

Security policycaution

No repository security policy was found. This is a transparency gap, although it is partly offset by the repository's Psalm tooling and the package's small scope.

Version stabilitycaution

The assessed version is still an alpha prerelease, and every recent release is a prerelease. This limits maturity and compatibility confidence.

Workflow auditcaution

The only workflow was fully analyzed with no reported audit findings, no untrusted checkout or script-injection paths, and no top-level write permissions. Both action references are unpinned, which is a minor reproducibility and supply-chain hygiene concern.