mnapoli/bref

Registry deprecationdanger

Packagist marks the entire package as abandoned, which is a serious adoption warning; the listed replacement is the same package, while active release and repository signals partly contradict the status.

Repo bus factorcaution

One contributor made about 96% of recent commits, creating a substantial concentration risk; organization backing provides some handoff capacity but does not remove the concern.

Repo toolingcaution

The project uses Make and Composer, but no security-scanning tools were detected; this is a modest transparency and assurance gap rather than evidence of abandonment.

Workflow auditcaution

All three workflows were analyzed with no high- or medium-confidence findings involving untrusted input. All 17 action references are unpinned, and two workflows install packages outside a lockfile, leaving reproducibility and workflow hygiene concerns.