aberdeener/luckperms-api-wrapper

Release historycaution

This is the package's only release, published over three years ago, with no releases in the last 12 months. That leaves maintenance and compatibility uncertain despite the repository remaining available.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. Combined with a single historical release, this is a meaningful sign of slowing maintenance.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling was detected. The missing scanner is a transparency and hygiene gap, not proof of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a moderate transparency gap for a client library handling API credentials.

Workflow auditcaution

The audit covered both workflows without failures and found no dangerous triggers or sinks, but all four action references are unpinned. That weakens reproducibility and update integrity without making the package unfit on its own.