xp-framework/csv

Release historycaution

The latest release was about 2 years and 6 months ago, with no releases in the last 12 months. The long package history helps, but the current release gap raises abandonment risk.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months. Together with the lack of releases in the last year, this is the main maintenance concern.

Repo toolingcaution

The repository uses Composer for builds, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it is a secondary concern for this small package.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 3 action references are unpinned, leaving a supply-chain hygiene gap.