iodigital-com/composer-semver-cli

Release historycaution

The package has had no releases in the last 12 months, despite nine releases since July 2024. This suggests a meaningful slowdown, although the linked repository remains active enough to avoid treating the project as abandoned.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. That weakens evidence of ongoing maintenance, even though the repository is not archived.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool is configured. This is a modest transparency and maintenance gap for a small project.

Security policycaution

The repository has no security policy. For a small CLI package this is a minor transparency gap rather than a severe dependency risk.

Workflow auditcaution

The single workflow was fully analyzed with no unsafe triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, leaving avoidable build-integrity exposure.