tallowandsons/craft-lantern

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, while the last repository push was about nine months ago; this is a meaningful maintenance concern.

Release historycaution

The package has six releases, but all were published within its first month and the latest release was about nine months ago, suggesting an unproven maintenance pattern.

Repo toolingcaution

Composer build tooling is present, but the repository has no security scanning tools, leaving a notable project-hygiene gap.

Security policycaution

The repository has no security policy, which weakens vulnerability-reporting transparency for a package that integrates into Craft CMS projects.

Workflow auditcaution

The workflow is fully analyzed and scopes permissions at job level, with no untrusted trigger or injection findings; however, its one action use is unpinned, weakening build reproducibility.