contenir/contenir-config

Release historycaution

The package has only 4 releases, all published within the same day, so there is not yet enough history to demonstrate sustained maintenance.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months. Because the repository was just released and shows 4 merged pull requests in the last month, this is a limited-history concern rather than evidence of abandonment.

Repo toolingcaution

Composer is used for the build, but no security scanning tool was detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, so vulnerability reporting expectations are not documented.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but it has one high-confidence medium-severity secrets-inherit finding and its only action use is unpinned.