besmartand-pro/bsap-sensor-bundle

Release historycaution

This is the package's first release, published 0 days ago, so there is no release cadence or track record yet. That reflects immaturity rather than abandonment, but it limits confidence in long-term maintenance.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, but the repository and release are brand new. This is an absence of maintenance history rather than evidence that previously active maintenance has collapsed.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. For a new package this is a meaningful transparency and hygiene gap, though it is not severe on its own.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although the small, newly published project and other available documentation partly limit the significance.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, so their contents can change without a repository change.