mediawiki/semantic-watchlist

Release historycaution

The package has only three releases since January 2015, with no registry releases in the last 12 months and the latest release on March 17, 2023; this indicates a slow release cadence.

Repo bus factorcaution

All five recent commits came from one contributor, creating a concentrated maintenance dependency; organizational ownership partly mitigates handoff risk but does not remove it.

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected, leaving a security-process gap.

Security policycaution

No repository security policy was found, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but both action references are unpinned, so their contents can change outside a release review.