mnemesong/spex

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption risk because the publisher no longer presents it as maintained.

Release historydanger

The package has had no releases in nearly four years, despite 18 releases clustered in August 2022. The prolonged release gap strongly indicates abandonment for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the absence of releases since August 2022. The linked repository is not archived, but there is no observed recent maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is secondary to the abandonment evidence.

Workflow auditcaution

Both workflows use read-only permissions and have no reported audit findings, which is a positive control. However, all four action references are unpinned, leaving a modest workflow supply-chain hygiene gap.