seagm-swoft/session

Release historycaution

The package has only two releases, both published within about 12 hours in November 2025, with no later releases during its 310-day lifetime. This provides limited evidence of sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance warning despite the package being relatively small.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That leaves an avoidable gap in ongoing dependency and code checks.

Security policycaution

The repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, although it is not evidence of a vulnerability itself.

Workflow auditcaution

All five analyzed workflow action references are unpinned, weakening build reproducibility and increasing exposure to upstream action changes. The audit otherwise found no dangerous triggers, untrusted checkouts, injection findings, or excessive top-level write permissions.