promatur/sc-analytics

Release historycaution

The latest registry release was over two years ago, with no releases in the last 12 months; this weakens confidence that fixes and compatibility updates will arrive.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, which is a meaningful maintenance concern for a library whose latest registry release is already over two years old.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. The absent scanning is a hygiene gap rather than evidence of abandonment.

Workflow auditcaution

Both workflows scope permissions read-only, but all five action references are unpinned and the audit found a high-confidence unpinned container image in phpstan.yml, weakening build reproducibility and update safety.