mnemesong/structure

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement given. This is a severe adoption risk because future maintenance and support are explicitly uncertain.

Release historydanger

The latest release was published on August 17, 2022, with no releases in the last 12 months. A package with over four years of release inactivity is unlikely to receive needed fixes.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with prolonged inactivity. This materially increases abandonment risk.

Security policycaution

The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency and maintenance gap, though not as severe as the abandonment evidence.

Workflow auditcaution

Both workflows use read-only permissions and the audit found no untrusted checkouts, script injection, or high-severity findings. However, all four analyzed action references are unpinned, leaving a modest workflow reproducibility risk.