pantheon-systems/terminus-composer-plugin

Release historycaution

The package has only 4 releases since December 2016, with no releases in the last 12 months and a median interval of about 798 days. This indicates a slow maintenance cadence, though the latest release is still recent enough to avoid an abandonment verdict.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. That weakens evidence of active maintenance, although the repository was pushed recently according to repository_archived.

Security policycaution

No security policy was found in the repository. This reduces transparency for reporting and handling vulnerabilities, though the repository does use Codacy scanning.

Workflow auditcaution

The sole workflow was fully analyzed with no injection or high-severity findings, but all 4 action references are unpinned. That is a supply-chain hygiene gap without evidence of an exploitable workflow path.