psx/atom

Release historycaution

The package has only two releases over about 2 years and 4 months, with one release in the last 12 months and a median interval of about 19 months; this limits evidence of sustained maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so maintainers provide no documented security-reporting process for consumers or contributors.

Version stabilitycaution

The current release is v0.2.0 and is not a prerelease, but the pre-1.0 version indicates the API may still be less mature than a stable-major package.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all 4 action references are unpinned, weakening build reproducibility.