rovangju/commie

Release historycaution

The package has only 5 releases across 4920 days, with a median interval of about 3 years; the release today shows current publishing but not a sustained cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, which is a maintenance concern, although the current release and two merged pull requests show some recent project activity.

Repo toolingcaution

Composer is used for builds, but no security scanning tool is configured, leaving a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, making vulnerability reporting expectations less clear for users.

Workflow auditcaution

The single workflow was fully audited and uses read-only permissions with no detected findings, but all 3 action references are unpinned, weakening build reproducibility and update safety.