robthree/humanoid

Release historycaution

The package has four releases since April 2022, but none in the last 12 months and the latest was published in November 2024. This indicates a real maintenance concern, though the project is not extremely immature.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, consistent with the release gap and increasing abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap for a library.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings. However, both action references are unpinned, which leaves the build dependent on moving action versions.