wikimedia/getid3

Name lookalikedanger

The package is flagged as borrowing the identity of wikimedia/less.php, and it is not described as a fork; this is a severe adoption risk even though artifact overlap is zero.

Release historycaution

The package has had no release in nearly three years, with zero releases in the last 12 months. Recent repository activity provides some compensation, but the published release cadence remains a maintenance concern.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. The repository was pushed in January 2026, which softens but does not remove the recent inactivity concern.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but all six action references are unpinned, leaving build inputs less reproducible.