cartograph/minecraft-slp

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, despite the latest release being about four months before collection. This suggests maintenance may have paused and raises abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The repository's separate SECURITY.md provides some compensating security-process evidence, making this a limited hygiene concern rather than a severe risk.

Workflow auditcaution

All four workflows use read-only permissions and the audit found no untrusted checkouts, script injection, or other findings. However, all 8 of 8 action references are unpinned, leaving workflow supply-chain versions less controlled.