a2lix/auto-form-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release and regular yearly cadence partly offset this, but the latest development activity is thin.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

No repository security policy was found, leaving the project's vulnerability-reporting process unclear.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no dangerous triggers, untrusted checkouts, injection findings, or audit failures. However, all 10 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.