angeo/module-ucp

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although registry releases and a recent push show some activity, the lack of sustained commit activity is a meaningful maintenance concern for this young package.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a project-hygiene gap, though it is not evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no detected sinks or high-severity findings, but all four action references are unpinned. The missing top-level permissions block is acceptable on its own; unpinned actions remain a build reproducibility and update-integrity weakness.