cloudcreativity/ddd-modules

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is concerning after otherwise regular releases, though the recent release and June push partly offset the abandonment risk.

Repo issue activitycaution

There has been no issue or pull-request activity in the last month, with one open issue. This is a modest maintenance concern but not strong evidence of abandonment by itself.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. That leaves a meaningful transparency and detection gap for a dependency intended for application use.

Security policycaution

The repository has no security policy. This weakens disclosure transparency and contributor guidance, although it is not evidence that the release is unsafe.

Workflow auditcaution

Both workflows were analyzed successfully and had no auditor findings, with one workflow using read-only permissions. However, all 8 action references are unpinned and one workflow has top-level write permissions, creating avoidable workflow supply-chain and privilege hygiene gaps.