arniepalau/cc-composite

Release historycaution

The package is only 39 days old but has 61 releases, including 61 in the last 12 months, showing strong recent activity while leaving limited evidence of long-term stability.

Repo bus factorcaution

One contributor made all 62 commits in the last three months, creating a significant continuity risk for maintenance if that person becomes unavailable.

Repo toolingcaution

Composer build tooling is used, but no security scanning tooling was detected; this is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and handling procedures undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or untrusted execution sinks. However, all three action references are unpinned, reducing build reproducibility and allowing dependency changes without a commit update.