netcommons/rss-readers

Release historycaution

The package is mature, with releases since 2016, but only one release in the last 12 months indicates a slow maintenance pace.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is a meaningful maintenance concern, although the repository was updated for this release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

Both workflows were analyzed successfully with no untrusted checkouts or script injection, but all nine action references are unpinned and one high-confidence finding uses an archived action repository.