leviy/coding-standard

Release historycaution

The package has 25 releases over about 8 years, but none in the last 12 months and its latest registry release was nearly three years ago. This is a meaningful maintenance concern, though the package has a substantial release history.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. That supports the release-history warning and raises abandonment risk, although the repository is not archived.

Repo toolingcaution

The repository uses Composer and Make, showing basic build tooling, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkouts, script injection, or high-confidence audit findings. However, all four action references are unpinned, which weakens build reproducibility and supply-chain hygiene.