bannerstop/keycloak-bundle

Release historycaution

release_history reports 40 releases, but all releases and the package age are recorded within the same day with a zero-day median interval, so this dataset does not establish a durable release history.

Repo commit activitycaution

repo_commit_activity reports zero commits and zero active maintainers in the last three months. The recent push recorded by repository_archived is encouraging, but it does not demonstrate sustained activity over time.

Repo popularitycaution

repo_popularity reports zero stars, forks, and watchers. This is weak supporting evidence, but the repository appears newly observed, so it does not independently indicate poor health.

Repo toolingcaution

repo_tooling confirms Composer build tooling, but reports no security scanning tools. That is a modest transparency and maintenance gap, not a severe risk by itself.

Workflow auditcaution

workflow_audit analyzed the single workflow completely, found read-only permissions and no untrusted checkout or injection sinks, but both of its two action references are unpinned. That weakens build reproducibility without indicating an active dangerous workflow.