pocketmine/bedrock-block-upgrade-schema

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement provided. Recent repository activity partly offsets abandonment concerns but does not remove the registry warning.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the package-to-source relationship is less transparent than expected.

Security policycaution

The repository has no security policy. This is a transparency gap, though the package is primarily data rather than executable application code.

Workflow auditcaution

The single workflow is fully analyzed and has no untrusted checkout or script-injection findings, but both action references are unpinned and it installs a package outside a lockfile.