xefi/faker-php-locales-en-pk

Release historycaution

The package is 464 days old but has only one release, with none in the last 12 months. That is a meaningful maintenance concern for a dependency, though the repository remains active enough to offset an abandonment conclusion.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. That weakens evidence of ongoing maintenance, although the recent repository push shows the project is not archived.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. This reduces transparency about vulnerability reporting and handling, though it is not by itself evidence of abandonment.

Workflow auditcaution

Both workflows were analyzed with no dangerous triggers or audit findings, and one scopes permissions at job level. However, all five action references are unpinned, leaving the workflow supply chain less reproducible.