joy/voyager-convert-to

Release historycaution

The package has 23 releases, but none in the last 12 months and the latest registry release was over two years ago. This materially raises maintenance and abandonment concerns.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, providing no recent evidence of active development.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The README's security contact is useful context but does not replace a repository policy.

Workflow auditcaution

All 12 action references are unpinned, and the audit found a high-confidence unpinned container image in php-cs-fixer.yml. There are no untrusted checkouts or script-injection findings, but the release workflow remains exposed to changing dependencies.