beechit/default-upload-folder

Release historycaution

The project has existed for about 9 years with 19 releases, but only one release in the last 12 months. The latest release is recent, so this indicates slowing activity rather than abandonment.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That is a meaningful maintenance concern, although the recent release and push provide some compensating evidence.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools are configured. The missing scanning is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.

Workflow auditcaution

The only workflow uses two unpinned actions and contains a high-confidence template-injection finding. There are no untrusted checkouts or write-wide permissions, so this is a hygiene concern rather than a severe standalone risk.