vasildakov/postcode

Release historycaution

The package has only three releases and none in the last 12 months; its latest release was about 2 years and 9 months ago. This points to low maintenance activity, though a small stable library may not need frequent releases.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but current maintenance capacity is not demonstrated.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Workflow auditcaution

The workflow was fully analyzed, uses read-only permissions, and has no detected injection or other audit findings. However, all three referenced actions are unpinned, leaving build inputs less reproducible.