tamasmazuk/amazon-s3-php-class

Release historycaution

The package has had no release in about three years, with zero releases in the last 12 months. Its five-release history shows an established release rather than a brand-new package, but the prolonged gap lowers maintenance confidence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the roughly three-year release gap. This is a meaningful abandonment concern, although the repository is not archived.

Repo popularitycaution

The linked repository reports zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any visible adoption provides little compensating evidence for the maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting guidance undocumented. This is a modest transparency gap for a client that handles cloud-service credentials and data.

Workflow auditcaution

The workflow audit completed successfully with no dangerous triggers, untrusted checkouts, or audit findings. However, all 3 of 3 action references are unpinned, creating a supply-chain hygiene weakness without evidence of an exploitable workflow path.