tourze/gb-t-12406

Release historycaution

The package has three releases over about 15 months, with one release in the last 12 months and a median interval of about 80 days; this indicates a modest rather than highly active release cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a concrete sign that maintenance has recently stalled.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; for this small library that is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, weakening build reproducibility.