linfly/pinyin

Lifecycle scriptscaution

The package defines post-install and post-update Composer scripts. These add execution during dependency operations and deserve caution even though this signal alone does not establish malicious behavior.

Release historycaution

The latest release was in May 2023, with no releases in the last 12 months despite 46 releases overall. This long publishing gap materially raises abandonment risk.

Repo commit activitycaution

The linked repository recorded zero commits and zero active maintainers in the last three months, consistent with the release-history gap and indicating no current maintenance activity.

Security policycaution

No security policy is present in the repository. This is a transparency and response-process gap, though it is secondary to the maintenance evidence.

Workflow auditcaution

The only workflow was fully analyzed with no high-confidence findings or untrusted checkout and script-injection paths. Its one action is unpinned, a modest reproducibility and supply-chain hygiene gap.