phootwork/lang

Release historycaution

The package has 23 releases since 2015, but none in the last 12 months; the latest release was nearly two years ago. This indicates materially slowed maintenance despite its established history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the evidence of inactive maintenance.

Security policycaution

The repository has no security policy. For a maintained library this reduces transparency about vulnerability reporting, although it is partly offset by the package's clear repository and release history.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but both referenced actions are unpinned and one uses an archived action. This is a meaningful supply-chain hygiene concern, not a standalone severe risk.