migears/i18n

Release historycaution

This is the package's first and only registry release, published today, so there is no demonstrated long-term release history despite the active repository.

Repo bus factorcaution

One contributor made all six recent commits, leaving maintenance highly concentrated and creating a meaningful continuity risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected; for a new package this is a modest transparency gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all four action references are unpinned, which weakens build reproducibility and supply-chain hygiene.