pyrech/castor-example

Release historycaution

The package has had no releases in over two years, with only three releases overall; this is meaningful evidence of limited ongoing maintenance.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, consistent with the repository’s last push being over two years ago and raising abandonment risk.

Repo toolingcaution

Composer is used for the build, but no security-scanning tool was detected; this is a modest transparency and maintenance gap for dependency health.

Security policycaution

The repository has no security policy, reducing clarity about vulnerability reporting and maintenance handling.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous sinks or audit findings, but both of its two action references are unpinned, leaving avoidable build-integrity exposure.