sbominator/transformatron

Release historycaution

Only two releases exist, both from March 2025, with no release in roughly 18 months; this indicates limited demonstrated maintenance despite the repository remaining available.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, reinforcing the concern raised by the long release gap.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a useful maintenance safeguard absent.

Security policycaution

The repository has no security policy, making vulnerability reporting and response expectations unclear.

Version stabilitycaution

The assessed version is pre-1.0, so API stability and maturity are less established, although it is not marked as a prerelease.