bxshef/options

Release historycaution

The package is only 4 days old, with 7 releases and a median interval of about 7 hours, so long-term maintenance and stability cannot yet be established.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest gap in repository security hygiene.

Security policycaution

The repository has no security policy, which makes vulnerability-reporting expectations less transparent; this is a hygiene concern rather than evidence of abandonment.

Workflow auditcaution

Both workflows were analyzed without high-confidence audit findings or unsafe untrusted triggers, but all 7 action references are unpinned and one workflow grants top-level write access, weakening build reproducibility and token minimization.