cable8mm/toc

Release historycaution

The package has seven releases over 876 days but only one release in the last 12 months, indicating a slower recent cadence despite the latest release being recent.

Repo bus factorcaution

All two recent commits came from one contributor, leaving limited visible redundancy if that contributor becomes unavailable.

Repo commit activitycaution

The repository recorded two commits in the last three months, showing current activity but only modest maintenance momentum.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a transparency and maintenance gap, not evidence of a security incident.

Workflow auditcaution

All seven analyzed action references are unpinned, which weakens reproducibility. However, the audit found no untrusted checkouts, script injection, or top-level write permissions, limiting the impact.