endroid/data-sanitize-bundle

Release historycaution

The package has 14 releases since January 2018, but none in the last 12 months; the latest release was nearly two years ago. This indicates slowing maintenance without proving abandonment.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the long release gap, this raises concern about ongoing maintenance capacity.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. The missing scanning is a modest repository hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all five action references are unpinned. That leaves the build exposed to upstream action changes over time.