bupy7/xml-constructor

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent release provides some compensating evidence, but current development activity is still quiet.

Repo toolingcaution

Composer is used for builds, but no security scanning tool is configured. This is a modest assurance gap for a dependency project.

Security policycaution

The repository has no security policy, leaving no published process for reporting or coordinating vulnerability fixes.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers or audit findings, but all 3 action references are unpinned, reducing build reproducibility and supply-chain protection.