geekset/octane-doctor

Registry deprecationdanger

Packagist marks the entire package abandoned, not just this release, with no clear replacement package named. That makes relying on this registry package unsafe despite activity in the linked repository.

Repo bus factorcaution

All recent commits come from one contributor. Organization backing provides some handoff capacity, but there is still no demonstrated second active contributor.

Repo commit activitycaution

The repository recorded one commit from one active maintainer in the last three months. That demonstrates some recent activity but is thin evidence of sustained maintenance.

Workflow auditcaution

All five workflows were analyzed, but every one of 12 action references is unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. No untrusted checkout or script-injection sink was found, so this is a caution rather than a standalone severe risk.