anode/cast-template-engine

Release historycaution

The package is brand new, with two releases published on the same day and no longer-term release history. This limits evidence of sustained maintenance, though it is not abandonment by itself.

Repo commit activitycaution

No commits and no active maintainers were observed in the last three months. Because the repository is newly created, this is limited evidence rather than proof of abandonment, but it leaves maintenance capacity unestablished.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and maintenance gap for a new package.

Security policycaution

The repository has no security policy. That does not make the package unsafe, but it provides no documented process for handling vulnerability reports.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned. This weakens build reproducibility and action supply-chain hygiene.