code-rhapsodie/connector-mistral

Release historycaution

The package has five releases, all within its first day, followed by about 11 months without a release. This suggests an unfinished or inactive release cadence despite the package being about one year old.

Repo commit activitycaution

There were zero commits and zero active maintainers during the last three months measured. Combined with the long gap since the last release, this is a meaningful maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That weakens automated oversight for a package integrating an external AI service.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, though it is moderated by the package's small scope and available tests.

Workflow auditcaution

All 14 analyzed action references are unpinned, which leaves workflow dependencies exposed to changing upstream code. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-confidence findings, and the workflow has no top-level write permission.