texthtml/object-reaper

Release historycaution

The package has only two releases, both published in February 2025, with no releases in the last 12 months; this indicates a very quiet release history for a package assessed at version 1.1.0.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured, which weakens evidence of ongoing maintenance.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected; for this small package that is a modest transparency gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The workflow audit completed cleanly with read-only permissions and no dangerous triggers or sinks, but all three analyzed action references are unpinned, leaving avoidable build reproducibility risk.