seagm-swoft/error

Release historycaution

Only two releases occurred, both within about 17 hours, and there has been no later release for roughly 10 months. This is limited evidence of sustained maintenance, though the package may be intentionally stable.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with the roughly 10-month gap since the latest release, this is meaningful evidence of inactive maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small PHP component this is a hygiene gap, not a standalone adoption blocker.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it is less decisive for a small component than the maintenance evidence.

Workflow auditcaution

Both workflows were analyzed without audit findings or untrusted-code sinks, but all five action references are unpinned. The absence of a top-level permissions block is acceptable here; the unpinned references remain a supply-chain hygiene concern.