swoft-fork/config

Release historydanger

This package has only one release, published 639 days ago, with no releases in the last 12 months. That leaves maintenance and compatibility with future environments unproven.

Repo commit activitydanger

There were zero commits and zero active maintainers during the last three months. Combined with the single-release history, this is strong evidence that active maintenance cannot be relied on.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap for a package intended for production use.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous audit findings or untrusted checkout paths, but all five action references are unpinned. That weakens build reproducibility and supply-chain hygiene.