2chain/pimcore-messenger-dashboard

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Given the package's young age, this is a meaningful maintenance concern even though the latest release was published earlier in the observed period.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That weakens repository hygiene without independently indicating that the package is unsafe.

Security policycaution

No repository security policy was found, reducing transparency for reporting and handling vulnerabilities.

Version stabilitycaution

v0.0.5 is not a stable major release, which indicates an immature API and higher change risk for dependents, although it is not marked as a prerelease.

Workflow auditcaution

The only workflow was fully analyzed and uses read-only permissions with no dangerous audit findings, but all 13 action references are unpinned, leaving builds exposed to mutable action changes.