fresns/plugin-manager

Release historycaution

The package has 83 releases over about 4.5 years, but only one release in the last 12 months despite a historical median interval of about 6 days, indicating a marked slowdown.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a concrete sign of currently weak maintenance activity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving security hygiene less visible.

Security policycaution

The repository has no security policy, so users lack a documented process for reporting vulnerabilities or understanding security response expectations.

Workflow auditcaution

All 5 workflow action references are unpinned, and the sole workflow grants top-level write permissions. The audit found no untrusted checkout, script injection, or other detected high-confidence issue, so this is a hygiene caution rather than a severe risk.