aternos/taskmaster

Repo bus factorcaution

One contributor made all commits in the last 3 months. Organization ownership provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, indicating limited recent maintenance despite the recent release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving security-quality checks less transparent.

Security policycaution

The repository has no security policy, so the process for reporting and handling vulnerabilities is not documented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 3 action references are unpinned, weakening build reproducibility and supply-chain hygiene.