labor-digital/composer-dev-symlink

Release historycaution

The latest release was published in February 2021, and there have been no releases in over five years. This is a meaningful maintenance concern, although the repository was pushed more recently and is not archived.

Repo issue activitycaution

There is one open issue and one open pull request, but none were created or closed in the last month. This indicates limited recent public activity rather than active issue management.

Repo toolingcaution

Composer is used as the build tool, which fits the package, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap.

Security policycaution

The repository has no published security policy. For a small development plugin this is not severe, but it leaves vulnerability-reporting expectations and handling procedures unclear.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both action references are unpinned, weakening build reproducibility and supply-chain hygiene.