rockero-cz/starter-kit

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement identified beyond the same package name. This is a direct warning against taking a new dependency on the release.

Release historydanger

The package has had no release in nearly two years, despite 24 releases overall. Its earlier rapid cadence does not compensate for the current lack of releases.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating current maintenance risk.

Security policycaution

The repository has no security policy or security scanning tools. This weakens transparency and vulnerability-reporting readiness, though it is secondary to the package’s abandonment status.

Workflow auditcaution

All four workflows were analyzed without high-confidence findings or untrusted triggers, but all 11 action references are unpinned. That is a meaningful maintenance and build-reproducibility hygiene gap.