geowrgetudor/disk-metrics

Release historycaution

The latest registry release was about two years and six months ago, and there were no releases in the last 12 months. This is a meaningful maintenance concern despite four releases since December 2023.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent push timestamp is some compensating evidence, but it does not demonstrate an active development cadence.

Security policycaution

No security policy is present in the repository. This is a transparency gap, though it is less serious for a small Laravel metrics package than for security-sensitive software.

Workflow auditcaution

All three workflows were analyzed, but all six action references are unpinned and two workflows grant top-level write permissions. The high-confidence bot-conditions finding is a workflow hygiene concern; there was no untrusted checkout or script injection.