wufr/php-language-localizer

Maintainerscaution

One registry publishing account is listed. The repository owner is an individual rather than an organization, so there is no organizational backing signal to offset the thin maintainer base.

Release historycaution

The package is 655 days old with 12 releases, but only one release appeared in the last 12 months. The current release and repository activity provide some evidence of ongoing work, but the recent release cadence is thin.

Repo commit activitycaution

The repository records zero commits and zero active maintainers in the last three months. The same-day release and five merged pull requests show recent repository work, but the absence of recorded commit activity weakens confidence in sustained maintenance.

Workflow auditcaution

All six analyzed action references are unpinned, which creates avoidable dependency drift and build-integrity exposure. The only audit finding is low-confidence cache-poisoning hygiene, so it does not independently warrant a stronger penalty.