mwstake/mediawiki-lib-nodes

Release historycaution

The package has 14 releases since August 2022, but none in roughly the last 14 months. Recent repository activity partly offsets the registry release gap, though the release cadence is still a maintenance concern.

Repo bus factorcaution

All three recent commits came from one contributor, leaving maintenance continuity dependent on a single active contributor. Organization backing provides some ability to hand off maintenance, but no second recent contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and assurance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, so there is no documented reporting or response process for vulnerabilities.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, injection findings, or excessive permissions, but all four action references are unpinned. That weakens build reproducibility and supply-chain hygiene.