slick/telemetry

Release historycaution

The latest release was published in April 2022, and there were no releases in the following 12 months. This indicates a long maintenance gap, though the package has six releases and a stable major version.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This materially raises the risk that compatibility or security fixes will not arrive promptly.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. The build setup is present, while automated security coverage is limited.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency and maintenance weakness, though it is not evidence of a vulnerability by itself.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted triggers, but all three action references are unpinned. The workflow also lacks a top-level permissions block, which is acceptable on its own.