2lenet/hermes-bundle

Repo popularitycaution

The repository has only 2 stars and no forks, indicating limited adoption evidence, but popularity is supporting evidence and does not outweigh the strong release and activity record.

Repo toolingcaution

The project uses Make and Composer, but no security-scanning tools were detected; this is a modest assurance gap rather than evidence of abandonment.

Security policycaution

The repository has no SECURITY.md or other detected security policy, leaving vulnerability-reporting and response expectations unclear.

Workflow auditcaution

All three workflows were analyzed successfully with no detected high- or medium-severity findings and no untrusted triggers or sinks. However, all 9 action references are unpinned, which weakens build reproducibility and supply-chain control.