symplely/coroutine

Release historycaution

The package has 29 releases but none in the last 12 months, with the latest published in March 2021; this indicates prolonged release inactivity.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is evidence of current maintenance inactivity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

All 16 analyzed action references are unpinned, and six high-confidence unsound-condition findings were reported across all three workflows. The audit was complete and found no untrusted checkouts or script injection, but the workflow hygiene remains weak.