thled/pest-plugin-shorthands

Release historycaution

The latest release was over five years ago, and there have been no releases in the last 12 months; this is a substantial abandonment concern despite the package having three releases.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the long release gap and indicating no observed maintenance capacity.

Repo toolingcaution

The repository uses Composer build tooling, but it has no detected security scanning tools; the missing scanning is a modest transparency and maintenance gap for a dependency project.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented; this matters more when the project has already shown no recent maintenance.

Workflow auditcaution

All six analyzed workflow action references are unpinned, weakening build reproducibility. The audit found no untrusted checkouts, script injection, high-severity findings, or incomplete workflow analysis, which keeps this as a hygiene concern rather than a severe risk.