navarr/specific-time

Maintainerscaution

Registry publishing access is held by one maintainer. Because the repository is user-owned rather than organization-backed, this leaves a relatively thin publishing and maintenance base.

Release historycaution

Only two releases have been published since November 2022, although one release appeared in the last 12 months. This supports a usable but slowly maintained project rather than an actively evolving one.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release is reassuring, but the lack of current activity lowers confidence in ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For this small library, that is a modest transparency and hygiene gap rather than a severe risk.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings, but all 11 action references are unpinned. The missing top-level permissions block is acceptable on its own, while unpinned actions modestly weaken build reproducibility.