spekulatius/silverstripe-composer-update-checker

Registry deprecationdanger

Packagist marks the entire package as abandoned, which is a serious adoption concern even though the listed replacement uses the same project name under the source organization.

Release historycaution

The package has 32 releases since September 2015, but its latest release was over two years ago and it had no releases in the last 12 months. That supports a material maintenance concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The repository was pushed more recently, but current development activity is still absent.

Security policycaution

The repository has no published security policy. This reduces vulnerability-reporting transparency, although it does not by itself show abandonment.

Workflow auditcaution

All three workflows were analyzed without high- or medium-confidence findings, and two use read-only permissions. However, all three analyzed action references are unpinned, leaving a modest workflow hygiene gap.