php-etl/bucket-contracts

Release historycaution

The package has only three releases since September 2021, with no release in the last 12 months and a median interval of about 13 months. That suggests a slow maintenance cadence, though the package is small and contract-focused.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance despite the repository not being archived.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, but it is not severe enough to make the small contracts package unfit on its own.

Workflow auditcaution

All three analyzed action references are unpinned, reducing build reproducibility and increasing exposure to action changes. The audit found no dangerous triggers, sinks, high-severity findings, or incomplete workflow analysis.