php-flasher/flasher-sweet-alert

Registry deprecationdanger

Packagist marks the entire package as abandoned, even though it has recent releases; package-level abandonment is a major warning for a new dependency.

Repo bus factorcaution

One contributor made all two commits in the last three months, leaving maintenance dependent on a single active contributor even though the repository is organization-owned.

Repo commit activitycaution

Only two commits were recorded in the last three months, indicating limited recent maintenance despite the recent release history.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the link between this artifact and its source is less transparent than expected.

Workflow auditcaution

The only workflow uses a pull_request_target trigger without an untrusted checkout or script injection, but its sole action reference is unpinned, leaving a modest reproducibility and supply-chain hygiene gap.