phalcon/devtools

Release historydanger

The package has 63 releases over more than 11 years, but none in the last 12 months; the latest registry release was about five years ago. This is a meaningful maintenance and freshness concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Although the repository has a recent push timestamp, the observed commit activity points to limited current maintenance.

Repo issue activitycaution

There were no new or closed issues and no new or merged pull requests in the last month, despite 24 open issues and 10 open pull requests. This indicates little recent visible project activity.

Repo toolingcaution

The project uses Make, Composer, and Box for builds, but no security-scanning tools were detected. The build tooling is a positive; the missing scanning coverage is a modest transparency gap.

Workflow auditcaution

Both workflows were analyzed successfully with no untrusted checkout or script-injection findings, but all 10 action references are unpinned and one high-confidence medium-severity finding identifies an archived action. These are avoidable workflow-maintenance risks.