govcms-poc/govcms

Registry deprecationdanger

Packagist marks the entire package abandoned, which is a significant adoption and continuity concern even though the linked repository remains active. The listed replacement is the same package name without the original namespace, so the migration path should be verified.

Workflow auditcaution

Both workflows were analyzed successfully, use read-only permissions, and have no audited high- or medium-severity findings. However, all three analyzed actions are unpinned, leaving avoidable workflow supply-chain exposure.