woohoolabs/worm

Release historycaution

The latest registry release was June 2020, with no releases in the last 12 months. This is a substantial maintenance concern for a library dependency, despite its earlier release history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. That indicates currently limited maintenance activity, even though the repository was pushed more recently than the package release.

Repo toolingcaution

The project uses Composer and Make, but no security-scanning tooling was detected. That weakens ongoing security hygiene without outweighing the repository's other maintenance evidence.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but it is not evidence that the package is unsafe.

Workflow auditcaution

All 12 analyzed action references are unpinned, so workflow dependencies can change without a reviewed package update. The audit found no untrusted checkouts, script injection, or high-severity findings, which limits this to a hygiene concern.