willdurand/js-translation-bundle

Repo commit activitycaution

There were no commits and no active maintainers during the last three months, which weakens confidence in ongoing maintenance. This is partly offset by the recent 8.0.0 release and repository push, but the short-term activity gap remains a caution.

Repo issue activitycaution

The repository has only one open issue and three open pull requests, with one new issue in the last month. The lack of recently closed issues or merged pull requests is a modest activity concern, but not evidence of abandonment by itself.

Repo toolingcaution

Composer build tooling is present, supporting a conventional project workflow. No security scanning tools were detected, leaving a security-process gap, though this does not by itself make the package unfit to use.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response. This is a process gap, not evidence that the release is unsafe.

Token permissionscaution

The only workflow lacks top-level token permissions, so its required access is not explicitly minimized. No workflow has top-level write permissions, which limits the severity of this hygiene gap.