vluzrmos/precodahora

Release historycaution

Only three releases were published, all within roughly four days in November 2024, with none in the following 12 months. This makes ongoing maintenance uncertain despite the repository still being available.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That recent inactivity reinforces the release-history concern, although the repository was pushed more recently than the package was released.

Repo toolingcaution

Composer is used for the build, but no repository security-scanning tooling was detected. This is a modest transparency and hygiene gap rather than evidence of an unsafe release.

Version stabilitycaution

The assessed version is v0.0.3 and the package has not reached a stable major version, so its API may still change. It is not marked as a prerelease, which partly offsets that concern.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkout, injection, or other reported findings, but its one action is unpinned. The missing top-level permissions block is acceptable on its own and does not show excessive write access.