nettrine/migrations

Release historycaution

The package is mature at over nine years old with 18 releases, but only one release occurred in the last 12 months, indicating a slower cadence rather than abandonment by itself.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is a meaningful maintenance concern, though the repository was pushed recently and the package released within the broader period.

Repo toolingcaution

The project uses Composer and Make, but no security-scanning tooling was detected; this is a modest transparency and hygiene gap rather than a severe dependency risk.

Workflow auditcaution

All four workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all seven action references are unpinned, weakening build reproducibility.