dvelum/dvelum-core

Release historycaution

The package has five releases, but its latest release was about five years ago and it had no releases in the last 12 months, indicating a sustained maintenance gap.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, and the repository was last pushed about five years ago, strongly indicating inactivity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned, weakening build reproducibility and update control.