glowy/csrf

Release historydanger

The package has had no release in more than four years, with zero releases in the last 12 months; its five-release history shows an otherwise established package but not current maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap and raising abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and maintenance gap rather than evidence of unsafe code.

Security policycaution

The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities in a security-focused component.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or untrusted triggers, but all four action references are unpinned, leaving builds exposed to moving action versions.