phlak/strgen

Release historycaution

The package has eight releases since May 2014, but none in the last 12 months and the latest release was in January 2018. This is a substantial maintenance concern for a dependency, despite its established history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating no recent development activity. The repository was pushed in July 2023, which provides some newer activity but does not offset the current silence.

Security policycaution

No repository security policy was found, reducing transparency about how vulnerabilities should be reported. Dependabot and Psalm provide compensating security tooling, so this is a minor gap rather than a severe risk.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four referenced actions are unpinned, leaving build inputs less reproducible and creating a modest supply-chain hygiene concern.