cachethq/badger

Release historycaution

The package is mature, with releases since November 2019, but only one release in the last 12 months and a median interval of about three years indicate a deliberately slow cadence. Recent repository activity compensates for much of that concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanner is a modest transparency gap, not a severe dependency risk on its own.

Security policycaution

The repository has no security policy. For a maintained library this makes vulnerability reporting less explicit, creating a minor transparency gap.

Workflow auditcaution

All three workflows were analyzed with no high- or medium-severity findings, and no untrusted checkout or script-injection paths were detected. However, all seven action references are unpinned and one workflow grants top-level write access, so CI supply-chain hygiene remains a caution.