php-arsenal/faker

Release historydanger

The latest release was in April 2021, with no releases in the last 12 months and 14 releases overall. This is strong evidence that the package is no longer actively maintained.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the long release gap and leaving little evidence of ongoing maintenance.

Repo popularitycaution

The linked repository has 1 star and no forks or watchers. Popularity is only supporting evidence, but these figures provide little additional evidence of active community support.

Security policycaution

The repository has no published security policy. That reduces transparency and makes vulnerability reporting less clear for a package with no recent maintenance activity.

Workflow auditcaution

All 9 analyzed action references are unpinned, so workflow dependencies can change without a reviewed package release. The reported cache-poisoning findings have low confidence and do not independently add substantial risk.