tcgunel/shpr-bot

Release historydanger

The package has 15 releases but none in the last 12 months, and its latest release was in March 2022; this is substantial evidence of inactivity.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the long release gap and raising maintenance risk.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, providing little evidence of broader community review or support. Popularity is supporting evidence, so this is a caution rather than a severe risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted execution paths, but all 3 action references are unpinned, weakening build reproducibility.