zvax/storage

Release historydanger

The package has 13 releases since December 2015, but its latest release was January 19, 2023, with no releases in the last 12 months. This indicates a substantial maintenance gap.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history's prolonged inactivity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance-hygiene gap.

Workflow auditcaution

Both analyzed workflow action references are unpinned, and the audit reported a low-confidence cache-poisoning pattern. The workflow uses read-only permissions and has no untrusted checkout or script-injection findings, limiting the impact.