plaisio/canonical-hostname-resolver-static

Release historycaution

The package has had 5 releases since November 2019, with no releases in the last 12 months and a median interval of about 497 days. This indicates slow maintenance, though the long-lived history reduces abandonment concern.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the release history showing no release in the last 12 months. This lowers confidence in active maintenance.

Repo toolingcaution

Composer and Phing build tooling are present, but no security scanning tools were detected. Build tooling supports reproducibility, while the missing scanner is a modest hygiene gap.

Security policycaution

The repository has no security policy. For a small library this is a transparency gap, but it is not evidence of unsafe code by itself.

Workflow auditcaution

The single workflow was fully analyzed and uses read-only permissions with no detected audit findings or untrusted execution paths. However, all 4 action references are unpinned, leaving avoidable build-integrity exposure.