digitalrevolution/jbdiff

Release historycaution

The package has had no releases in the last 12 months, and its latest release was more than three years ago. This is a meaningful maintenance concern despite eight releases overall.

Repo commit activitycaution

There were no commits from active maintainers in the last three months. The recent repository push shown by repository status partly offsets this, but the observed commit activity still suggests limited current development.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe concern.

Workflow auditcaution

The single workflow was fully analyzed with no injection, untrusted checkout, or high-severity findings. However, all 7 action references are unpinned, leaving build inputs less reproducible and more exposed to upstream changes.