xefi/faker-php-locales-es-es

Release historycaution

Only two releases have appeared across 461 days, with one release in the last 12 months and a median interval of about 209 days. That is a slow cadence, though reasonable for a small locale extension.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, while the repository was last pushed about six months ago. This is meaningful evidence of currently slow maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. For a small PHP extension this is a modest transparency gap rather than a severe risk.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it does not by itself indicate abandonment.

Workflow auditcaution

All five analyzed action references are unpinned, so workflow dependencies can change without a repository change; the two workflows were fully analyzed and had no reported findings or untrusted triggers. The absence of top-level permissions is not a concern here, with one workflow using job-level permissions.