smhg/date-timespan

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is partly offset by the release published on the collection date, but it still indicates limited ongoing activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small library this is a hygiene gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 3 action references are unpinned, leaving them exposed to upstream changes.