malamalca/pures3

Release historycaution

The package has published 11 releases since May 2023, but none in the last 12 months. Recent repository commits partly offset the registry release gap, but release continuity is still a concern.

Repo bus factorcaution

Two contributors were active, but one made about 90% of the recent commits. That concentration leaves maintenance capacity fragile.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. This weakens disclosure guidance for a package used in engineering calculations, although it does not by itself indicate abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 7 referenced actions are unpinned, which weakens build reproducibility and supply-chain hygiene.