spiriitlabs/composer-write-changelogs

Release historycaution

The package has only 3 releases, all concentrated around April 2023, with no releases in the last 12 months. This suggests an aging release line, although it is not evidence of deprecation by itself.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Combined with the old latest release, this weakens evidence of ongoing maintenance.

Security policycaution

The repository has no security policy. This limits transparency for reporting and handling vulnerabilities, though it is partly offset by the available tests, documentation, and organization-backed repository.

Workflow auditcaution

All 6 analyzed workflow references are unpinned, and the audit found a high-confidence unpinned container image. The workflow has no untrusted checkout or script-injection findings, so this is a hygiene concern rather than a severe risk.