legatus/session

Release historycaution

The package has had no releases in more than five years, with zero releases in the last 12 months. Its six-release history shows an initially active period but no evidence of current maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push in February 2021. This is a substantial abandonment concern for a library dependency.

Security policycaution

The repository has no security policy. For a session-handling library this reduces the transparency of vulnerability reporting, though the repository does use Psalm security scanning.

Workflow auditcaution

All four workflows were analyzed successfully and have no dangerous triggers or audit findings, but all 12 action references are unpinned. That leaves build automation exposed to unreviewed action changes and is a moderate hygiene gap.