geekish/faker-horse-battery-staple

Release historycaution

The package is mature and released version 3.0 in the last year, but only three releases over roughly ten years and a median interval of about 4 years 9 months indicate a sparse cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months, despite a recent release, which weakens evidence of ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy. This is a transparency gap, though the package is small and has no observed security-specific workflow finding.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, which leaves avoidable workflow supply-chain exposure.