cboxdk/telemetry-native

Release historycaution

The package was released only minutes ago and has just one release, so there is no track record for maintenance or release stability yet.

Repo commit activitycaution

There were no commits or active maintainers in the preceding three months, but this is partly explained by the package being newly released; it still leaves maintenance capacity unproven.

Repo popularitycaution

The repository has no stars, forks, or watchers. This is expected for a release created minutes ago and is supporting evidence only, not a standalone health failure.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a meaningful repository hygiene gap for a native extension.

Token permissionscaution

Two workflows omit top-level token permissions and the release workflow grants write permissions, increasing CI credential exposure compared with a least-privilege setup.