stolt/composer-peel

Project backingcaution

The package is backed by an individual repository owner rather than an organization, so the one-person publishing and ownership model provides limited redundancy.

Release historycaution

The package is less than one day old and has only two releases, so there is not enough history to demonstrate durable maintenance or release stability.

Repo popularitycaution

The repository has one star, no forks, and no watchers. This is consistent with a new package and is supporting evidence rather than a decisive health problem.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, which weakens build reproducibility and action supply-chain hygiene.