webignition/single-command-application-phar-builder

Release historycaution

The latest release was 4 years ago, with no releases in the last 12 months and only four releases overall. This is a significant maintenance concern, though the package is not deprecated and the assessed version had release notes.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap. No provided activity signal compensates for this lack of recent development.

Repo popularitycaution

The repository has 0 stars, 0 forks, and 1 watcher, providing little evidence of broad community adoption or review. Popularity is supporting evidence rather than decisive, so this is a mild concern.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, but it is less severe because the package has an identified source repository and release notes.

Workflow auditcaution

All 10 analyzed action references are unpinned, reducing build reproducibility and increasing exposure to changes in referenced actions. The audit found no untrusted checkouts, script injection, dangerous triggers, or high-severity findings, which limits the impact to caution.