takeshiyu/composer-linker

Release historycaution

This is the package's only release, published about 18 months ago, with no releases in the last 12 months; that leaves maintenance and compatibility uncertain.

Security policycaution

No repository security policy is provided. This is a transparency gap, though it is less concerning for a small Composer development tool without other workflow findings.

Version stabilitycaution

Version 0.1.0 is an early, non-stable-major release, so its API and behavior may change more than those of a mature 1.x package.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no dangerous audit findings. However, all four action references are unpinned, leaving avoidable build-integrity risk.