cobweb/svconnector_feed

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. The recent release partly offsets this, but the lack of ongoing activity raises maintenance risk between releases.

Repo toolingcaution

The project uses Make and Composer for build work, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not evidence that the release is unsafe.

Security policycaution

The repository has no security policy. For a maintained library this reduces clarity about vulnerability reporting and response expectations.

Workflow auditcaution

Both workflows were analyzed successfully with no reported audit findings or untrusted checkout and script-injection paths. However, all four action references are unpinned, leaving avoidable workflow supply-chain drift.