psx/model

Release historycaution

The package has existed for over 10 years with 30 releases, but only one release appeared in the last 12 months. That is a modest maintenance concern for a dependency, though the latest release is recent enough to avoid an abandonment conclusion.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with only one release in the last 12 months, this indicates quiet maintenance and raises abandonment risk.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. The missing scanning is a hygiene gap, not evidence that the release is unsafe to depend on.

Security policycaution

No repository security policy was found. This weakens transparency around vulnerability reporting, though it is a hygiene concern rather than a standalone dependency blocker.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all four action references are unpinned, leaving the CI supply chain less reproducible.