quazardous/gramphp

Release historycaution

This is the package's first release, published today, so there is no track record for release cadence or sustained maintenance yet.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, but the package and repository are only a day old, so this mainly reflects limited observable history rather than a demonstrated collapse.

Security policycaution

The repository has no SECURITY.md or other security policy, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

v0.1.0 is a non-stable major version, which signals an early API and project maturity stage despite not being marked as a prerelease.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all four action references are unpinned, reducing build reproducibility and update safety.