parceltrap/driver-pkge

Release historycaution

Only two releases have appeared since October 2022, with a median interval of about 3.5 years, although one release was published in the last 12 months. This indicates a small, infrequently updated project rather than active release maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release provides some counterevidence, but current maintenance activity is still limited.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

No repository security policy was found. The README gives a security contact, which partly compensates for the missing formal policy.

Workflow auditcaution

All 10 analyzed action references are unpinned, and the audit found a high-confidence low-severity adhoc package installation in the release workflow. There are no untrusted checkouts or script-injection findings, and one workflow scopes permissions at job level.