juststeveking/password-generator

Release historycaution

The package has only one release, published nearly four years ago, with no releases in the last 12 months. That sharply reduces evidence of ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has stopped receiving maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small package this is a hygiene gap rather than evidence of abandonment on its own.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its action references are unpinned. That is a supply-chain hygiene weakness without evidence of an actively exploitable workflow.