kynetcode/wpzylos-migrations

Project backingcaution

The repository is owned by a user account rather than an organization, so the project has limited visible institutional backing to offset its small maintenance base.

Release historycaution

This package is 98 days old and has only one release, so there is little evidence of sustained maintenance or release practice.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern for a package whose only release was about three months ago.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest repository hygiene gap.

Workflow auditcaution

All 9 analyzed action references are unpinned, which weakens build reproducibility; one workflow also grants top-level write permissions, though the audit found no untrusted triggers, sinks, or high-confidence dangerous findings.