seagm-swoft/limiter

Release historycaution

The package has only one release, published about 10 months ago, so there is little release history to demonstrate sustained maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. That weakens evidence of ongoing maintenance, although the repository is not archived.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are configured. This is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed successfully and have no dangerous triggers or audit findings, but all five action references are unpinned, which weakens build reproducibility and supply-chain hygiene.