kornrunner/ethereum-address

Release historycaution

The package has existed for about 7 years but only 4 releases, with a median interval of about 538 days; one release in the last 12 months shows some ongoing maintenance but a slow cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a meaningful sign of currently low maintenance activity despite the recent push and release evidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear for a package that handles address and key-related functionality.

Workflow auditcaution

Both workflows were fully analyzed with no trigger or injection findings, but all 8 of 8 action references are unpinned, weakening build reproducibility and supply-chain hygiene.