michalsn/codeigniter-signed-url

Release historycaution

The package has five releases over roughly 3 years 9 months, but none in the last 12 months and the latest registry release was in October 2023. This lowers confidence in ongoing release maintenance.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last 3 months. The recent push date is compensating evidence that it is not abandoned outright, but current development activity is still thin.

Repo issue activitycaution

There are no open issues and two open pull requests, but no issues or pull requests were merged in the last month. This is modest evidence of limited current activity.

Security policycaution

No repository security policy was found. This is a transparency gap for reporting vulnerabilities, though it is not by itself evidence that the package is unsafe.

Workflow auditcaution

All eight workflows were analyzed without failed files or dangerous audit findings, and one workflow has read-only permissions. However, all 28 referenced actions are unpinned and one workflow grants top-level write access, creating avoidable maintenance and supply-chain hygiene risk.