loophp/combinator

Release historycaution

The package has had no registry release in about 5 years, despite a healthy early cadence; this is a meaningful maintenance concern for a dependency.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release pause and increasing abandonment risk.

Workflow auditcaution

All 20 analyzed action references are unpinned, and the audit found one high-confidence medium-severity use of an archived action. Workflows were fully analyzed and showed no untrusted checkout or script-injection paths, which limits the concern to build hygiene rather than a severe workflow risk.