beebmx/kirby-sign

Release historycaution

Only two releases were published, both within about two days, and none appeared in the last 12 months; the package may be minimally maintained despite its recent initial release.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the release history and raising a meaningful maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected, leaving a modest security-maintenance gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The sole workflow was fully analyzed and has no dangerous triggers, sinks, or audit findings, but both of its two action references are unpinned, weakening build reproducibility.