labrador-kennel/composite-future

Release historydanger

The latest release was 3 years and 8 months ago, with no releases in the last 12 months. This is the strongest maintenance concern, although the small four-release history may reflect a completed, narrowly scoped library.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the long release gap. This reduces confidence that compatibility or dependency issues will be addressed promptly.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are configured. The missing scanning is a modest transparency and maintenance gap rather than evidence of unsafe behavior by itself.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 3 of 3 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.