myparcelcom/final-mile-tracking

Release historycaution

The package is mature, with releases since February 2022, but only one release in the last 12 months and a median interval of about 199 days indicate a slow maintenance cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, a meaningful sign of currently limited maintenance activity despite the recent release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest assurance gap.

Security policycaution

The repository has no security policy, making vulnerability reporting and disclosure expectations less transparent.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers, untrusted checkouts, or audit findings. However, all 3 referenced actions are unpinned, so workflow inputs are less reproducible and tamper-resistant.