xefi/faker-php-locales-de-de

Release historycaution

The package has four releases over about 22 months, with one release in the last 12 months. This is a modest cadence for a small locale extension but does not indicate abandonment by itself.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This suggests limited current maintenance capacity, although the recent repository push and release history partly offset the concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For this small package this is a moderate transparency gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, though it does not by itself show that the package is unsafe to depend on.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers, untrusted checkouts, or audit findings, and one scopes permissions at job level. All five action references are unpinned, leaving workflow dependencies exposed to moving upstream versions.