contributte/validator

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. The recent release and push history provide some counterweight, but the current inactivity raises maintenance uncertainty.

Repo popularitycaution

The repository has 7 stars and 5 forks, indicating a small user and contributor audience. Popularity is supporting evidence rather than a verdict, but the limited community offers little visible resilience if the maintainer stops.

Repo toolingcaution

The repository uses Make and Composer, but no security scanning tools were detected. This is a modest transparency and maintenance gap, partly offset by its documented security policy and automated workflows.

Workflow auditcaution

All four workflows were analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all 8 action references are unpinned, leaving builds exposed to upstream action changes.