pmjones/auto-shell

Release historycaution

The package has five releases over about 3 years and one release in the last 12 months, with a median interval of about 4 months. That indicates ongoing but relatively infrequent maintenance.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last 3 months. The recent release partly offsets this, but current development activity is still quiet.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear for consumers.

Workflow auditcaution

The single workflow was fully audited with no dangerous triggers, sinks, or high-confidence findings, but all 3 action references are unpinned. Unpinned actions weaken build reproducibility and update control.