thedoctor0/psonic

Release historycaution

This is the package's only release, published over a year ago, with no releases in the last 12 months. That limits evidence of sustained maintenance, although the package is not deprecated.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since its sole release. This raises abandonment risk but is not enough on its own to make the package unfit.

Repo popularitycaution

The repository has zero stars, forks, and watchers, providing no community-adoption evidence. Popularity is only supporting evidence, so this is a minor caution rather than a decisive health concern.

Security policycaution

The repository has no security policy. For a small PHP client this is a transparency gap, though the clean workflow audit and Dependabot configuration provide some compensating hygiene.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, which weakens reproducibility and supply-chain hygiene.