fond-of-oryx/jellyfish-cross-engage

Release historydanger

The package has only 3 releases since July 2021, with no release in the last 12 months and the latest release in June 2023. This indicates materially slowed maintenance for a dependency, despite the repository remaining available.

Package scaffoldingcaution

The package contains tests and the repository also has tests, which supports basic project maturity. However, no README is present for consumers of this PHP module, leaving an integration and transparency gap.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months. That recent inactivity raises maintenance and abandonment risk, although it is not evidence that the repository is permanently abandoned.

Security policycaution

The linked repository has no security policy. This is a transparency gap for reporting vulnerabilities, though it is less significant for the package's dependency health than its release and commit inactivity.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, script injection, or high-severity findings. All 3 action references are unpinned, which weakens reproducibility and supply-chain hygiene.