horde/vcs

Release historycaution

The package is about 2 years and 9 months old but has only four releases, with one release in the last 12 months. That indicates a sparse release cadence, although the latest release is recent enough to avoid an abandonment verdict by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is concrete evidence of currently quiet development and raises maintenance risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning coverage is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. That weakens the project's documented process for receiving and handling security reports.

Workflow auditcaution

All five workflows were analyzed successfully with no reported audit findings or dangerous trigger sinks, and none use top-level write permissions. However, 7 of 12 action references are unpinned, leaving avoidable build-integrity exposure.