matthiasmullie/path-converter

Release historycaution

The latest registry release was in January 2020, with no releases in the last 12 months. Thirteen releases over the package's history show prior activity, but the long current gap lowers confidence in ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the old latest release, this indicates weak current maintenance activity.

Repo toolingcaution

The repository uses Composer and Make, showing build tooling, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. For a small library this is not severe on its own, but it leaves vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All three workflows were analyzed with no reported audit findings or untrusted execution sinks. However, all five action references are unpinned, weakening build reproducibility and supply-chain hygiene.