spatie/workshop-unit-conversions

Release historycaution

The package has had only two releases, both in January 2021, with no release in more than five years. This materially raises abandonment and update-risk concerns despite the package being small and stable.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Although the repository was pushed recently, the observed commit activity still indicates limited ongoing development.

Security policycaution

The repository has no security policy. This is a minor transparency gap for a small utility, but it does not outweigh the available testing and static-analysis evidence.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkouts or script injection, but every action reference is unpinned and the auditor found a high-confidence unpinned container image. This is a real workflow reproducibility and supply-chain hygiene concern, not a standalone severe risk.