internal/promise

Release historycaution

The package is about 388 days old with five releases and two releases in the last 12 months; this shows ongoing publishing, though the cadence is limited.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, which is a meaningful maintenance concern despite the recent repository push shown elsewhere.

Repo toolingcaution

Composer is used for the build, but no security-scanning tool was detected, leaving a modest transparency and assurance gap.

Security policycaution

The repository has no security policy, reducing clarity about vulnerability reporting and response expectations.

Workflow auditcaution

Both workflows were analyzed without audit failures or dangerous findings, but all five action references are unpinned, so workflow dependencies can change without a reviewed version update.