akibeo/kirby-altcha

Project backingcaution

The repository is owned by an individual account rather than an organization, so formal project backing is limited; this is consistent with a new small package and is not itself evidence of abandonment.

Release historycaution

This is the package's first release, published 0 days ago, so there is not yet enough history to demonstrate sustained maintenance. Its newness is uncertainty rather than evidence of abandonment.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, but the package itself is only 0 days old, so this is an unestablished history rather than a demonstrated collapse.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The repository's security policy and complete workflow audit partly compensate for this tooling gap.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but both action references are unpinned, leaving avoidable supply-chain exposure in CI.