plugrbase/statamic-environment-bar

Release historycaution

The latest release was over 4 years ago, with no releases in the last 12 months. Five releases over the package's lifetime show prior activity, but the current release gap is a meaningful maintenance concern.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the long release gap and raising abandonment risk.

Repo toolingcaution

The project uses Composer build tooling, which supports reproducible package management, but no security scanning tools were detected. This is a modest transparency and maintenance gap.

Security policycaution

No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented. The package's tests and changelog provide some compensating project structure, but not a security contact process.

Workflow auditcaution

All 3 workflow action references are unpinned, and one high-confidence medium-severity finding identifies an archived action. The audit was complete and found no untrusted checkouts, script injection, or broad top-level write permissions.