adhocrat-io/arkhe-main

Release historycaution

Sixteen releases in about four months show active development, but the zero-day median interval indicates a very rapid release cadence for a relatively young package.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. That is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This lowers transparency for a package handling backend authentication and permissions.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-confidence audit findings, but all four action references are unpinned. Unpinned CI actions leave build inputs less reproducible and deserve caution.