dragon-code/telemetry

Registry deprecationdanger

Packagist marks the entire package as abandoned and names dragon-code/request-tracker as its replacement. This is a direct adoption risk for a new dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. That indicates current maintenance has stopped or collapsed, despite the recent release timestamp.

Repo package mentioncaution

The repository name does not match dragon-code/telemetry and its README does not mention that package. This raises concern that the registry package may be associated with the wrong source repository.

Security policycaution

No security policy was found in the repository. This weakens vulnerability-reporting transparency for a package intended for use across services.

Workflow auditcaution

All five workflows were analyzed without failed files or audit findings, but all 10 action references are unpinned and two workflows grant top-level write permissions. These are workflow hygiene risks, not standalone proof of compromise.