aicrion/container

Release historycaution

The package is only 51 days old and has one release, so there is not yet enough release history to demonstrate sustained maintenance.

Repo commit activitycaution

Only two commits from one active maintainer were recorded in the last three months. Because the project is only 51 days old, this is limited evidence rather than proof of abandonment.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

All 11 analyzed GitHub Action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkouts, script injection, or high- or medium-severity findings, and the single top-level write workflow is only a mild concern.