recca0120/eloquent-dumper

Maintainerscaution

Only one registry maintainer is listed, leaving a thin publishing and maintenance base. The repository is user-owned rather than organization-backed, so there is no provided evidence of broader institutional support.

Release historycaution

The package has 15 releases since April 2020, but none in the last 12 months and the latest release was about two and a half years ago. This materially raises maintenance and abandonment risk.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months, consistent with the long release gap. The project is not archived, but current maintenance activity is absent.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent. This is a hygiene and maintenance concern rather than evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or injection findings, but all 3 of 3 action references are unpinned. That leaves build automation exposed to unreviewed action changes.