peso/debug

Release historycaution

This is the sole release, published about nine months ago, so the package has limited demonstrated release history and maintenance continuity.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a meaningful sign that maintenance may have slowed after the initial release.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling is configured, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerability reports are handled.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all four action references are unpinned, weakening build reproducibility and supply-chain hygiene.