swoft/annotation

Release historycaution

The latest release was published more than five years ago, with no releases in the last 12 months. This is a substantial maintenance concern, though the package has a prior release history rather than being abandoned immediately after launch.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap. The repository is not archived, but current maintenance capacity is not evident.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, and no open work remains. This is consistent with inactivity and provides no evidence of ongoing upkeep.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap, although it is partly offset by the package's otherwise clear source and licensing information.

Workflow auditcaution

Both workflows were analyzed successfully with no untrusted checkouts, script injection, or high-severity findings. All five referenced actions are unpinned, which weakens build reproducibility and supply-chain hygiene.