netglue/realip-helpers

Release historycaution

The package has only three releases, with the latest published in November 2020 and none in the following years. That long period without releases raises compatibility and abandonment concerns for a dependency.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the repository's last push in November 2020. This materially lowers confidence in ongoing maintenance.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than evidence of abandonment on its own.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations unclear. This is a transparency gap, though it is partly offset by the package's small scope and clear source repository.

Workflow auditcaution

The sole workflow was fully analyzed with no high-confidence audit findings or dangerous triggers, but all four action references are unpinned. That weakens build reproducibility and workflow supply-chain hygiene.