netcommons/holidays

Release historycaution

The package has existed for about 10 years with 22 releases, but only 1 release in the last 12 months and a median interval of about 171 days indicate a modest cadence. The latest release is recent, which partly offsets the concern.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months. Although a recent release exists, the lack of observed commit activity weakens evidence of ongoing maintenance.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. This is a transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving no documented channel or process for handling security reports. This lowers project transparency.

Workflow auditcaution

Both workflows were analyzed without failures and have no untrusted checkout or script-injection findings, but all 9 action references are unpinned and one high-confidence medium-severity finding uses an archived action. These are meaningful workflow-maintenance weaknesses.