percipioglobal/craft-password-policy

Registry deprecationdanger

Packagist marks the package abandoned at package scope, with no distinct replacement identified. This is a direct warning against taking a new dependency despite other signs of recent publishing.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That weakens evidence of ongoing maintenance even though the repository was pushed recently and registry releases continue.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a maintenance and transparency gap for a plugin handling password-policy functionality.

Security policycaution

The repository has no security policy. For a package involved in password management, that reduces transparency about vulnerability reporting and response.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers or audit findings, and permissions are scoped in at least one workflow. However, all four action references are unpinned, leaving avoidable build-integrity risk.