bolt/redirector

Release historycaution

The package has eight releases since July 2021, with one release in the last 12 months and the latest about eight months ago. This supports an established project but indicates only modest recent release activity.

Repo commit activitycaution

There were no commits from any active maintainer in the last three months. For a small extension this is a meaningful maintenance concern, though the January 2026 release shows more recent work outside that window.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and hygiene gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but all five action references are unpinned. The absence of a top-level permissions block is acceptable on its own, while unpinned actions create a supply-chain hygiene concern.