gettext/languages

Repo commit activitycaution

No commits or active maintainers were recorded in the last 3 months, which suggests limited short-term activity, although the release itself was recently pushed.

Repo toolingcaution

The project uses Composer build tooling, but no security scanning tools were detected, leaving a modest verification gap.

Security policycaution

The repository has no published security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

All 14 analyzed action references are unpinned, and one workflow grants top-level write access, creating workflow hygiene and token-scope concerns. The only reported cache-poisoning issue has low confidence, so it is not treated as a severe risk.