loyaltycorp/easy-monorepo

Registry deprecationdanger

Packagist marks the entire package as abandoned and names eonx-com/easy-monorepo as its replacement, making this release a poor dependency target despite the linked project's activity.

Release historydanger

The package has had no release in over six years, with zero releases in the last 12 months; this materially raises the risk that the published dependency is stale.

Repo toolingcaution

Composer and Make are used for builds, but no security-scanning tooling was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, which weakens vulnerability-reporting transparency for a package containing authentication and token-related components.

Workflow auditcaution

All three workflows were analyzed without high-confidence audit findings or dangerous triggers, but all 23 action references are unpinned, weakening build reproducibility.