coldtrick/advanced_notifications

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent push and release provide some compensating evidence, but the current maintenance pause is a real concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving automated security oversight limited.

Security policycaution

The repository has no security policy, so its process for reporting and handling vulnerabilities is not documented.

Workflow auditcaution

All three workflows were analyzed successfully with no trigger or audit findings, but all five action references are unpinned, weakening build reproducibility and update control. The absence of a top-level permissions block is acceptable here because no broader write scope was observed.