pressbooks/pressbooks-stats

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement supplied. This is a direct warning against taking a new dependency on the package.

Repository archiveddanger

The linked source repository is archived, which strongly indicates that normal maintenance and issue response have ended. This is severe abandonment risk despite the recorded push timestamp.

Release historycaution

The package has 18 releases over about nine years, but none in the last 12 months; the latest release was roughly two years ago. The earlier cadence provides maturity but does not offset the current inactivity.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with the archived repository and abandoned registry status, this supports a conclusion of inactive maintenance.

Workflow auditcaution

All seven analyzed action references are unpinned, and high-confidence secrets-inherit findings appear across the workflows. No untrusted checkout or script-injection paths were found, so this is a workflow hygiene concern rather than the primary health risk.