artisan-build/built-for-cloud

Release historycaution

The package is only 92 days old but has 35 releases, including 34 in the last 12 months and a median interval of about 9 hours. This shows active iteration, though the very rapid cadence warrants pinning and testing.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That is a transparency and assurance gap for a package handling credentials, though it is not evidence of abandonment.

Security policycaution

The repository has no security policy. For a package whose README describes credential and authentication functionality, the missing reporting guidance is a genuine transparency gap.

Token permissionscaution

The only workflow lacks a top-level permissions declaration. No write permissions were detected, but explicitly constraining token access would provide stronger workflow hygiene.

Version stabilitycaution

Version v0.15.0 is not a stable major release, and the README explicitly describes the 0.x release as still being finalized. It is usable, but compatibility may change before 1.0.