fragotesac/zf1-controller-action-helper-autocomplete

Release historycaution

This package has only one release, published over two years ago, with no releases in the last 12 months. That leaves maintenance and compatibility uncertainty for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. For a package with only one release, this provides little evidence of ongoing maintenance.

Security policycaution

The linked repository has no security policy. This is a transparency gap for reporting vulnerabilities, although the repository does use Dependabot for security scanning.

Workflow auditcaution

All five analyzed action references are unpinned, and the workflow audit found a high-confidence bot-conditions issue in the automatic merge workflow. There are no untrusted checkouts or script injections, but the automation still needs attention.