artprima/prometheus-metrics-bundle

Repo commit activitycaution

The repository had 0 commits and 0 active maintainers in the last 3 months, which is a maintenance concern despite the recent release history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, making vulnerability-reporting expectations less clear for a package used in applications.

Workflow auditcaution

All 16 action references are unpinned, and two high-confidence findings identify unpinned container images in CI; the workflows were fully analyzed and had no untrusted checkout or script-injection findings.