vinogradsoft/simple-files

Project backingcaution

The package and repository share the same individual owner, so the source relationship is consistent, but there is no organizational backing shown.

Release historycaution

The package has only two releases, with none in the last 12 months; its latest release was nearly three years ago. This indicates a slow or possibly dormant maintenance cycle.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the nearly three-year gap since the last release. This materially increases abandonment risk.

Repo toolingcaution

The project uses Composer, but no security scanning tools were detected. The repository's security policy partly compensates by providing a reporting path, though automated coverage is limited.

Workflow auditcaution

The workflow audit covered all one workflow with no untrusted checkouts, injection findings, or dangerous permissions. However, all four action references are unpinned, weakening build reproducibility.