veeqtoh/prompt-deck

Registry deprecationdanger

Packagist marks the entire package as abandoned and names promptphp/deck as its replacement, making this release a poor dependency target despite the active successor repository.

Repo bus factorcaution

One contributor made 87.5% of the recent commits, creating concentration risk, although a second contributor remains active and the repository is owned by an organization.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected; the repository's separate security policy partly offsets this transparency gap.

Version stabilitycaution

v0.4.6 is not a prerelease, but the package has not reached a stable major version, so compatibility expectations are more limited.

Workflow auditcaution

All three workflows were analyzed with no high-confidence audit findings or untrusted-code sinks. However, all five action references are unpinned and one workflow grants top-level write access, creating workflow hygiene and token-scope concerns.