peso/freecurrencyapi-service

Release historycaution

This package has made only one release, with no further release in about 14 months. That limits evidence of ongoing maintenance and makes adoption more dependent on the initial implementation.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. Combined with the single-release history, this is meaningful evidence that maintenance has slowed or stopped.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tool was detected. This is a modest transparency and maintenance gap rather than a severe dependency risk.

Security policycaution

No security policy is published, leaving no documented process for reporting or handling vulnerabilities. This lowers transparency for a package that makes network API requests.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers or audit findings, but all four action references are unpinned. That leaves avoidable build-integrity exposure, while the absence of a top-level permissions block is not a concern on its own.