contenir/contenir-maintenance

Release historycaution

The package is less than a day old with four releases and no established release interval, so its long-term maintenance pattern is not yet demonstrated.

Repo commit activitycaution

There were no commits or active maintainers recorded in the last three months. Because the repository and release are less than a day old, this is mainly an unproven maintenance record rather than evidence of abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting less transparent for consumers.

Workflow auditcaution

The single workflow was fully analyzed and has no untrusted checkout or script-injection path, but it uses an unpinned action and high-confidence medium-severity secrets-inherit, handing credentials to a reusable workflow more broadly than necessary.