petrknap/xz-utils

Release historycaution

The package has had 3 releases, but its latest release was about 1 year and 11 months ago, with 0 releases in the last 12 months. This indicates a prolonged maintenance gap for a package released over a short initial period.

Repo commit activitycaution

The repository had 0 commits and 0 active maintainers in the last 3 months, consistent with the release gap and increasing abandonment risk.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tool is reported. The missing scanning is a transparency and hygiene gap, not evidence that the package is unsafe.

Security policycaution

The repository has no published security policy. For a compression library, this leaves vulnerability-reporting expectations unclear and modestly reduces maintenance transparency.

Workflow auditcaution

All 3 workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 3 of 3 action references are unpinned, leaving workflow dependencies less reproducible.