jomweb/billplz

Release historycaution

The package has a long history with 62 releases, but only 1 release in the last 12 months despite a 25-day median interval, indicating a substantial slowdown in publishing activity.

Repo commit activitycaution

There were no commits and no active maintainers in the three months before collection, although the repository was pushed on the release date; this suggests limited recent development activity rather than clear abandonment.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool is configured, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities.

Workflow auditcaution

All 3 workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 9 action references are unpinned, which weakens build reproducibility and supply-chain control.