fortephp/reload

Release historycaution

The package is 196 days old with only 2 releases, released about 7 days apart. This shows initial activity but provides limited evidence of sustained maintenance.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, despite being a young package. The recent release history provides some earlier activity but does not compensate for the current inactivity.

Security policycaution

The linked repository has no security policy. This is a transparency and maintenance gap, although the package is backed by a matching organization-owned repository.

Version stabilitycaution

The assessed release is v0.2.0 rather than a stable major release, so its API and behavior may still change. The absence of prereleases is a modest compensating signal, but does not remove the early-stage risk.

Workflow auditcaution

All 8 analyzed action references are unpinned, which weakens build reproducibility and update control. The audit found no dangerous triggers, untrusted checkouts, script injection, or higher-risk secret findings, so this remains a hygiene caution rather than a severe risk.