romanfedorskij/cron

Release historycaution

The package is less than one day old, with five releases arriving within roughly 21 hours. This shows active initial publishing but provides almost no evidence of sustained maintenance.

Repo toolingcaution

The repository uses Composer and Make for build tooling, but no security scanning tools were detected. This is a hygiene gap for a package with substantial runtime dependencies, not a severe risk by itself.

Security policycaution

The repository has no security policy. For a new library this is a modest transparency and maintenance gap, though it is not evidence that the package is unsafe.

Version stabilitycaution

The assessed release is v0.1.0 and 80% of recent releases are prereleases, so the API and behavior are likely still changing. No stable-major release history compensates for that uncertainty.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, injection sinks, or audit findings, and it has no top-level write permissions. However, all five action references are unpinned, leaving avoidable build-reproducibility and action-substitution risk.