gemorroj/archive7z

Release historycaution

The package has existed since 2016 and has 15 releases, but only one release in the last 12 months with a median interval of about 224 days indicates a slower cadence.

Repo bus factorcaution

All eight recent commits came from one contributor, so maintenance depends heavily on a single person despite the recent activity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, which weakens build reproducibility.