ekvedaras/class-factory

Release historycaution

The package has 11 releases since August 2022, but none in the last 12 months; the latest registry release was about 20 months ago. This indicates slowed delivery, although the repository was pushed more recently.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured. Although the repository has a recent push and a current release note, the measured activity still indicates limited ongoing maintenance capacity.

Security policycaution

The linked repository has no security policy. This is a modest transparency gap for a package that may be used in applications, though dependency scanning is present.

Workflow auditcaution

All four workflows were analyzed, but all 8 action references are unpinned. The audit also found high-confidence bot-conditions and unpinned-images issues; the pull_request_target workflow has no untrusted checkout or script-injection sink, limiting the severity.