baumrock/rockmigrations

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, a meaningful sign of recently slowed maintenance despite its active release history.

Repo issue activitycaution

Only one issue is open and there were no new or closed issues or pull requests in the last month; this is quiet rather than severe, but provides little evidence of active community maintenance.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The linked repository has no security policy, making vulnerability reporting and response expectations less clear.

Workflow auditcaution

All 8 action references are unpinned, and the audit found high-confidence template-injection patterns plus an archived action; no dangerous trigger or untrusted checkout was reported, so this is a serious hygiene concern rather than a standalone critical finding.