web-id/flan

Release historydanger

The package has only two releases, with the latest published in June 2021 and none in the last 12 months, indicating long-term inactivity.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with a project that has effectively stopped receiving maintenance.

Repo toolingcaution

The repository uses Make and Composer, but no security scanning tools were detected; this is a modest transparency and hygiene gap.

Version stabilitycaution

Version 0.1.0 is not a stable major release, so the public API may still change if maintenance resumes; this is secondary to the package's age.

Workflow auditcaution

All three workflows were analyzed without untrusted triggers or script-injection findings, but all seven action references are unpinned and a high-confidence audit finding reports an unpinned container image.