php-tuf/composer-integration

Release historycaution

The package has 17 releases over about 27 months, but only one release in the last 12 months, indicating a slower current cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 8 issues and 5 pull requests remain open; this supports the maintenance concern.

Version stabilitycaution

This is version 1.0.0-alpha14, and 82% of recent releases are prereleases, so the API and behavior may still change substantially.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous audit findings or broad top-level write permissions, but all 4 action references are unpinned, leaving avoidable build-integrity risk.