sofa/eloquence-mutable

Release historycaution

The package has had no releases in over five years; its latest release was December 5, 2020, after eight releases since 2017. This is a meaningful maintenance concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. This raises abandonment risk.

Repo toolingcaution

The repository uses Composer for builds, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

No repository security policy was found. That limits disclosure transparency, but it is less significant for this small, inactive library than the prolonged maintenance gap.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings, but all three action references are unpinned. The missing top-level permissions block is acceptable on its own.