egough/holocron

Release historycaution

The package is 197 days old with only two releases, both published on the same day, so its long-term release and maintenance pattern is not yet established.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, indicating that maintenance activity has stopped or is not yet established.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are configured, leaving fewer automated checks for dependency or repository risks.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerability reports are handled.

Workflow auditcaution

The single workflow was fully analyzed without injection or high-severity findings, but all four action references are unpinned, making its build inputs less reproducible and update-controlled.