symkit/error-bundle

Release historycaution

The package has only four releases over roughly seven months, with the latest release about six months ago. This provides limited evidence of a mature, sustained release process.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, while the repository was last pushed about six months ago. That is meaningful evidence of stalled maintenance for a young package.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear. The presence of composer-audit partly offsets this operational gap but does not remove it.

Version stabilitycaution

Version v0.0.4 is not on a stable major version, so its API and behavior may still change significantly. It is not marked as a prerelease, which provides a small amount of compensating clarity.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 12 action references are unpinned. This weakens build reproducibility and supply-chain transparency without making the package unsafe on its own.