isapp/statamic-analytics

Release historycaution

The package has only three releases, all within about three days, with no later registry releases across the following months. This indicates a short and currently inactive release history.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. For a package released only months ago, that is a meaningful maintenance and abandonment concern.

Repo issue activitycaution

There was no issue or pull request activity in the last month, with one issue still open. This is modest supporting evidence of low project activity, though the small project size limits how strongly it should be weighted.

Repo toolingcaution

The repository uses Composer but reports no security-scanning tools. That is a hygiene gap, not evidence that the package is unsafe by itself.

Workflow auditcaution

The only workflow grants top-level write permissions and uses all five actions without pinning them to immutable references. It also has a high-confidence template-injection finding; the low-confidence cache-poisoning findings are hygiene concerns, but no untrusted trigger or checkout was reported to amplify them.