bear/streamer

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. The recent release partly offsets this, but the current absence of observed activity is a maintenance caution.

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tools were detected. This is a modest transparency gap, not evidence of unsafe behavior.

Workflow auditcaution

All three workflows were analyzed with no detected findings, unsafe triggers, or broad top-level write permissions. However, all three of the three analyzed action references are unpinned, which leaves avoidable workflow supply-chain hygiene risk.