siratik/package-loader

Release historycaution

This package was released twice within about 2 hours and is less than a day old, so there is too little history to establish durable maintenance.

Repo bus factorcaution

One contributor made all 16 recent commits, creating a meaningful continuity risk; organization ownership provides some ability to hand maintenance off.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest verification gap.

Version stabilitycaution

v0.1.1 is an early, pre-1.0 release rather than a stable major version, which increases compatibility and maturity uncertainty.

Workflow auditcaution

The only workflow is fully analyzed and has no untrusted checkout or script-injection findings, but it inherits secrets, uses one unpinned action, and lacks a top-level permissions block despite job-level scoping.