nicofff/ammonia

Release historycaution

There are 3 releases, all within the last 12 months, but they were concentrated within roughly 2 hours and no later release activity is shown. The initial burst provides some maturity evidence, while the subsequent pause limits confidence in continuity.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, despite the package being about 208 days old. This weakens confidence in ongoing maintenance.

Repo toolingcaution

The project uses Composer build tooling, but no security-scanning tools were detected. That reduces visible assurance for a security-sensitive HTML sanitizer.

Security policycaution

The repository has no security policy, leaving no documented route for reporting vulnerabilities. This is a transparency gap, though it is not evidence of an active vulnerability.

Workflow auditcaution

All 10 analyzed GitHub Actions references are unpinned, and one workflow grants top-level write permissions. No untrusted checkout or script-injection sink was found, so this is workflow hygiene risk rather than a severe supply-chain risk.