itrack/anaf

Release historycaution

The package has 12 releases over about 8 years, with 1 release in the last 12 months and a median interval of about 207 days. This supports continued maintenance but indicates a slow cadence.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the past 3 months. The recent release and push show the project is not abandoned, but current development activity is limited.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools are configured. This is a transparency and hygiene gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy. That makes vulnerability reporting and response expectations less transparent, although it does not by itself show that maintenance has stopped.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only job permissions, and has no detected sinks or audit findings. However, its only action reference is unpinned, leaving that dependency exposed to moving changes.