smoren/formula-tools

Maintainerscaution

One registry maintainer account is responsible for publishing the package, which creates a thin publishing base. The linked repository is owned by the same individual, so this is a modest resilience concern rather than evidence of a broken project.

Release historycaution

The package has made no release in more than three years, with only three releases overall and none in the last 12 months. This is a meaningful maintenance concern, though the repository remains active enough to have been pushed in December 2024.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, indicating currently stalled development. The repository is not archived, but that does not offset the lack of recent work.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That leaves a transparency and maintenance gap for a package intended to be used as a dependency.

Workflow auditcaution

The only workflow was fully analyzed and has no untrusted checkout, injection, or high-severity findings, but all four action references are unpinned. The absence of a top-level permissions block is acceptable here because no broad write access was detected.