gordonsarah/tz-phone

Release historycaution

The package is only 32 days old with two releases, so its maintenance record is still too short to establish long-term stability.

Repo bus factorcaution

All four recent commits came from one contributor, creating a fragile maintenance path for a user-owned project.

Repo commit activitycaution

Four commits in the last three months show recent activity, but the short observed period limits confidence about sustained maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected; the repository's SECURITY.md partly improves transparency but does not replace automated scanning.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned, weakening reproducibility and supply-chain hygiene.