ecphp/ecas

Release historycaution

The package has 26 releases since 2020 with a typical interval of about 31 days, but no releases in the last 12 months and its latest release was nearly two years ago. This materially lowers confidence in ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the long registry release gap, this is meaningful evidence of slowed maintenance.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear. This is a transparency gap, though not evidence of abandonment by itself.

Workflow auditcaution

All 10 analyzed action references are unpinned, and the audit found a high-confidence medium-severity use of an archived action. No untrusted checkout, script injection, or broad top-level write permissions were found, but the workflow hygiene remains a real concern.