davidepastore/codice-fiscale-rest

Release historycaution

The package has 9 releases since August 2016 but none in the last 12 months; its latest release was in May 2021. This indicates a substantial maintenance gap for a framework-based application.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months. The linked repository is not archived, but there is no recent development activity to offset the inactivity signal.

Repo toolingcaution

Composer is used for builds, which supports repeatable project setup, but no security-scanning tool was detected. The build tooling is a positive, while the missing scanning is a modest transparency gap.

Security policycaution

The repository has no security policy. That reduces transparency about vulnerability reporting and maintenance expectations, though it does not by itself show that the package is unsafe.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but all 3 action references are unpinned and the workflow has no top-level permissions block. This is a reproducibility and least-privilege hygiene gap, not a severe workflow risk.