bycerfrance/json-fragments

Release historycaution

The package is only 1 day old with 2 releases, so there is too little history to establish sustained maintenance or maturity.

Repo commit activitycaution

No commits and no active maintainers were observed over the last 3 months; because the project is only 1 day old, this is mainly an unproven maintenance concern rather than evidence of abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The workflow scopes permissions read-only and has no reported audit findings, but both action references are unpinned, which weakens build reproducibility and supply-chain hygiene.