ereborcodeforge/durin-app

Release historycaution

The package was first released less than a day ago and already has six releases, with a median interval of about 25 minutes. This shows active initial iteration but provides little evidence of sustained maintenance or release stability.

Repo commit activitycaution

The repository records zero commits and zero active maintainers over the last three months. Because the package is newly created, this is partly explained by its age, but it still leaves sustained maintenance unproven.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe dependency risk.

Version stabilitycaution

v0.2.2 is not a prerelease, but the package remains below 1.0 and has no established release history yet. That limits maturity evidence without making the release unfit by itself.

Workflow auditcaution

Both workflows use read-only permissions and the audit found no injection, untrusted checkout, or other reported findings. However, all three analyzed action references are unpinned, leaving the CI supply chain less reproducible.