seagm-swoft/bean

Release historycaution

Only one release has been published, with no established release cadence to demonstrate ongoing maintenance. The package is about 301 days old, so this is a meaningful but not conclusive abandonment concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months. With only one release, there is little observed activity supporting continued maintenance.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. This is a modest transparency and hygiene gap rather than evidence that the package is unfit.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This lowers transparency for a dependency consumers may integrate into services.

Workflow auditcaution

Both workflows were analyzed successfully and contain no dangerous triggers or audit findings, but all five action references are unpinned. The missing top-level permissions blocks are acceptable on their own, while unpinned actions remain a supply-chain hygiene concern.