granam/strict-object

Release historycaution

The package has 15 releases but none in the last 12 months; the latest release was over five years ago, indicating substantial maintenance inactivity.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with a project that has been inactive for over five years.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured; this is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and handling procedures undocumented.

Workflow auditcaution

All 9 analyzed action references are unpinned, weakening build reproducibility and increasing exposure to upstream action changes. The workflows have no top-level permissions block, but there are no untrusted triggers or dangerous sinks and the audit completed fully.