maikuolan/cidram

Registry deprecationdanger

Packagist marks the entire package as abandoned and points to cidram/cidram, which creates adoption and update-tracking risk even though the assessed release is current.

Repo bus factorcaution

Recent activity is highly concentrated: one contributor made 57 of 58 commits, leaving limited redundancy if that maintainer becomes unavailable.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected, leaving a modest transparency and monitoring gap.

Workflow auditcaution

Both workflows were fully analyzed with no reported findings or untrusted sinks, but all 4 referenced actions are unpinned, weakening build reproducibility and update integrity.