crawlora/brave

Workflow auditdanger

All three workflows were analyzed and use read-only permissions, but all 45 action references are unpinned. The release workflow also has a high-confidence adhoc-packages finding and high-confidence use-trusted-publishing findings; low-confidence cache-poisoning findings add limited weight.

Release historycaution

The package is only 0 days old with two releases and a median interval of about 10 hours, so there is not enough history to establish dependable maintenance.

Repo commit activitycaution

The repository records zero commits and zero active maintainers over the last 3 months. Because the project is newly published, this may reflect its age, but it provides no demonstrated ongoing maintenance capacity.

Repo popularitycaution

The repository has zero stars, forks, and watchers. This is weak supporting evidence, though it is understandable for a package released only hours ago and is not decisive alone.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of abandonment.