phlib/litmus-subjectline-preview

Release historydanger

Only two releases were published, with the latest in May 2021 and none in the following five years. That is a substantial maintenance-age concern for a dependency, despite the repository being pushed more recently.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Although the repository was pushed in January 2025, the recent inactivity still raises maintenance risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. For a small library this is a meaningful, though not severe, transparency gap.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although the project has a clear organization owner and otherwise conventional source structure.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all four action references are unpinned, leaving avoidable update and supply-chain exposure.