novactive/ezmaintenancebundle

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement named. Package-level abandonment is a major adoption risk even though the repository is not archived.

Release historycaution

The package has six releases over about 6 years, but none in the last 12 months and its latest registry release was in January 2024. This indicates a sustained lack of publishing activity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. The repository's non-archived status does not compensate for the absent recent development activity.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. This is a transparency and maintenance gap, though it is less serious than the package's abandonment and inactivity signals.

Workflow auditcaution

Both workflows were analyzed without high-confidence audit findings or unsafe-trigger sinks, but both action references are unpinned. That leaves a modest reproducibility and action-supply-chain hygiene concern.