plaisio/company-resolver-uni

Release historycaution

The package has existed since November 2019 with six releases, but it had no releases in the last 12 months despite a latest release in June 2025, indicating a meaningful cadence gap.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, which is a maintenance concern even though the project has organizational backing.

Repo toolingcaution

Composer and Phing provide build tooling, but no security-scanning tool was detected, leaving a modest transparency and hygiene gap.

Security policycaution

No security policy was found, so the project gives consumers no documented channel or process for reporting vulnerabilities.

Workflow auditcaution

The workflow uses read-only permissions and had no detected audit findings or untrusted execution paths, but all 4 of 4 action references are unpinned, weakening build reproducibility and update safety.