smnandre/packapi

Release historycaution

The package has only two releases across about 376 days, with a median interval of about 351 days and one release in the last 12 months. The latest release is recent, but the long interval indicates limited release momentum.

Repo bus factorcaution

All three recent commits came from one contributor, giving the project a concentrated maintenance base. The matching repository and active release provide some continuity, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a maintenance and assurance gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no SECURITY.md or other detected security policy, reducing transparency for vulnerability reporting and response.

Workflow auditcaution

The single workflow is fully analyzed, uses read-only permissions, and has no detected dangerous triggers or audit findings. However, all seven action references are unpinned, leaving the workflow exposed to action-version drift.