crispframe/agency-theme

Release historycaution

The package is only 1 day old, with 8 releases concentrated within that period. This shows active initial publishing but provides almost no long-term maintenance history.

Repo commit activitycaution

There were no commits or active maintainers in the last 3 months, but the repository and package are only 1 day old. This limits evidence of sustained maintenance rather than proving abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a theme package with substantial source and build files, that leaves a meaningful security-process gap.

Security policycaution

The repository has no security policy, so there is no documented route for reporting vulnerabilities or describing security handling.

Workflow auditcaution

The single analyzed workflow completed fully and has no untrusted checkouts or script injection, but it uses a container image tagged latest with high confidence. That weakens build reproducibility and should be pinned.