plaisio/blob-store-blob

Release historycaution

The package has existed since November 2019 with 13 releases, but its latest release was about 15 months ago and there were no releases in the last 12 months. This indicates a meaningful slowdown, though not abandonment by itself.

Repo commit activitycaution

There were no commits and no active maintainers during the last three months, consistent with the long gap since the latest release. The repository is not archived and has a release history, so this is a caution rather than a severe abandonment finding.

Repo toolingcaution

The repository uses Composer and Phing for builds, which shows defined build tooling. It has no security scanning tools, leaving a modest maintenance and assurance gap.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it is not by itself evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no detected high- or medium-confidence findings. However, all five action references are unpinned, which weakens build reproducibility and update control.