xp-forge/ratelimit

Release historycaution

The package has nine releases over about 11 years, but no releases in the last 12 months; its latest release was on March 24, 2024. This indicates a mature but currently inactive release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That weakens evidence of ongoing maintenance, although the package may be stable and narrowly scoped.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a modest transparency and maintenance gap rather than evidence of abandonment by itself.

Security policycaution

The repository has no security policy. For a small library this is a transparency gap, though it is less significant than the demonstrated documentation and test coverage.

Workflow auditcaution

All one workflow was analyzed with no high- or medium-confidence audit findings, and it has no untrusted checkout or script-injection paths. However, all three action references are unpinned, reducing build reproducibility and supply-chain hygiene.