omaressaouaf/text-morph

Release historycaution

The package is 85 days old with only one release, so there is limited evidence of sustained release maintenance, though this alone does not indicate abandonment.

Repo bus factorcaution

All 25 recent commits came from one contributor, leaving maintenance and review capacity concentrated in a single person.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; the small package and passing test structure provide some compensating project hygiene.

Security policycaution

The repository has no security policy, which is a modest transparency gap for reporting vulnerabilities and handling security issues.

Workflow auditcaution

Both workflows were analyzed without high-confidence audit findings or unsafe-trigger sinks, but all five action references are unpinned and one workflow has top-level write permissions, creating avoidable workflow supply-chain and token-scope risk.