gollumsf/serializer-describe-annotation-bundle

Package scaffoldingdanger

The README explicitly marks the bundle as deprecated and directs users to gollumsf/serializer-describe-attribute-bundle. Tests, a release note, and a consumer-facing README provide useful transparency but do not remove the migration concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. A recent push and release exist, but the observed short-term activity is still weak for ongoing maintenance.

Security policycaution

The linked repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, although it does not by itself show that the package is unsafe.

Workflow auditcaution

All 12 analyzed workflows were complete and had no reported audit findings or untrusted checkout paths, but all 12 action references were unpinned. That leaves avoidable build-integrity exposure without evidence of an actively dangerous workflow.