eril/calendary

Release historycaution

The package is only 0 days old with two releases, so there is little evidence of sustained maintenance or release stability yet.

Repo bus factorcaution

All six recent commits came from one contributor, leaving maintenance highly dependent on a single person and providing little handoff resilience.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, reducing clarity about vulnerability reporting and maintenance response.

Workflow auditcaution

Both workflows were analyzed without high-confidence findings, but all seven action references are unpinned and one workflow grants top-level write permissions. This is a workflow-integrity hygiene concern, not a severe risk by itself.