woohoolabs/harmony

Release historycaution

The package is mature, with 42 releases since April 2015, but it has had no releases in the last 12 months, which lowers confidence in active maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a concrete sign that maintenance has slowed or paused.

Repo toolingcaution

The repository uses Composer and Make for builds, but no security scanning tools were detected, leaving a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, making vulnerability-reporting expectations less clear for consumers.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 12 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.