gemorroj/xbbcode

Release historycaution

The project is mature at 4,670 days old, but it has only 2 releases in the last 12 months and a median interval of about 9 months, indicating a slow cadence rather than abandonment.

Repo bus factorcaution

All 4 recent commits came from one contributor, so maintenance depends entirely on a single active developer despite the package having two registry maintainers.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling was detected, leaving repository security checks less transparent.

Security policycaution

The linked repository has no security policy, reducing clarity about how vulnerabilities should be reported and handled.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 3 action references are unpinned, weakening build reproducibility.