shrug/zealous-stan

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement identified beyond the package itself. This is a severe adoption and maintenance warning.

Repo commit activitydanger

The repository has recorded zero commits and zero active maintainers in the last three months, reinforcing the archived project's lack of ongoing maintenance.

Repository archiveddanger

The linked repository is archived, so it is no longer maintained through normal project activity. That substantially increases abandonment and future compatibility risk.

Release historycaution

The package has 24 releases over roughly three and a half years, but none in the last 12 months; the historical cadence does not compensate for the current release gap.

Workflow auditcaution

The audit found a high-confidence template-injection issue in the release workflow and two of five action references are unpinned. No dangerous trigger or untrusted checkout was reported, but the release workflow still needs corrective attention.