bartv2/imap-bundle

Release historycaution

This is the package's only release, published six months ago, so there is no established release track record or demonstrated ongoing delivery.

Repo commit activitycaution

The repository recorded no commits in the last three months and has no active maintainers in that period. Together with the single release, this indicates limited demonstrated maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That reduces the project's ongoing supply-chain hygiene.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The workflow was fully analyzed with no dangerous triggers or audit findings, but all six action references are unpinned. This is a workflow reproducibility and supply-chain hygiene weakness, not a severe risk on its own.