artemeon/mantis2github

Repo popularitycaution

The repository has only 1 star and 0 forks, indicating limited community adoption. For a small CLI this is supporting evidence rather than a health verdict, especially given recent maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap, not evidence of unsafe code by itself.

Security policycaution

The repository has no SECURITY.md policy, which leaves vulnerability-reporting expectations undocumented. This is a minor process gap for an otherwise active project.

Workflow auditcaution

Both workflows were analyzed successfully with no untrusted checkouts, script injection, or audit findings, but all 3 action references are unpinned. The missing top-level permissions blocks are acceptable here because no workflow requests top-level write access.