cartograph/minecraft-nbt

Release historycaution

This is a young package with one release, published about four months ago, so its maintenance track record is not yet established.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. For a package only about four months old, this leaves maintenance continuity unproven rather than showing long-term abandonment.

Repo toolingcaution

The project uses Composer, but no security scanning tool was detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Workflow auditcaution

All four workflows were analyzed, use read-only permissions, and had no high- or medium-severity findings. However, all eight action references are unpinned, leaving avoidable workflow supply-chain drift.