nailsapp/nails

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement specified; this is a direct warning against taking a new dependency on it.

Release historydanger

The last release was in January 2019, more than seven years ago, and there have been no releases in the last 12 months. This strongly indicates the published package is stale.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of current maintenance despite the repository not being archived.

Security policycaution

The linked repository has no security policy. This weakens vulnerability-reporting transparency, although it is secondary to the package's abandonment signals.

Workflow auditcaution

Both workflows were analyzed successfully with no flagged audit findings, but all six action references are unpinned. That leaves build inputs less reproducible and creates a modest supply-chain hygiene concern.