fragotesac/zf1-filter-input

Release historycaution

This package has had one release, with no releases in the last two years, which indicates limited ongoing maintenance. The stable version and repository tooling provide some compensating evidence but do not offset the stagnant release history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with an inactive project. Its small, focused scope may require fewer changes, but no recent activity leaves maintenance risk.

Security policycaution

The repository has no published security policy, reducing transparency for reporting and handling vulnerabilities. Dependabot is enabled, which partly compensates for the missing policy.

Workflow auditcaution

The audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow, and all five action references are unpinned. There are no untrusted checkouts or script-injection findings, so this is a meaningful hygiene concern rather than a severe standalone risk.