agenticmorf/fluxui-theme

Release historycaution

The package is about five months old but has only one release, so there is little release history to demonstrate sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which leaves ongoing maintenance capacity unproven for a package with only one release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so users lack a documented path for reporting vulnerabilities or understanding the project's security response.

Workflow auditcaution

The sole workflow grants top-level write permissions and all five action references are unpinned. The audit found no injection or other high-confidence dangerous findings, so this is a build-hygiene caution rather than a severe risk.