fond-of-oryx/gift-card-expiration

Release historycaution

The package has had only three releases and none in the last 12 months, with the latest in January 2023. The repository was pushed more recently, which partly offsets but does not remove the release-staleness concern.

Repo commit activitycaution

There were no commits and no active maintainers in the measured three-month period. The more recent repository push partly compensates, but current development activity remains uncertain.

Repo toolingcaution

The repository uses Make and Composer, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of unsafe code.

Security policycaution

No security policy is present in the repository, leaving vulnerability-reporting expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but all three action references are unpinned. That leaves avoidable build-integrity risk.