leanadmin/installer

Release historydanger

Only two releases exist, both published in January 2021, with no release in more than five years. The lack of deprecation is a compensating signal, but the release history still indicates substantial abandonment risk.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with no repository push since January 2021. This is strong evidence of abandonment risk.

Security policycaution

No security policy is present in the repository, leaving vulnerability reporting and response expectations unclear. The project's Psalm scanning provides some compensating hygiene but does not replace a policy.

Version stabilitycaution

The latest version is v0.2.0 and is not a stable major release, which limits maturity expectations. This is less concerning than the long inactivity because the package is explicitly small and pre-1.0.

Workflow auditcaution

All five workflow action references are unpinned, which weakens build reproducibility. The audit analyzed the only workflow successfully and found no untrusted checkout, script injection, dangerous trigger, secret, or high-severity finding.