de-swebhosting/oxideshop-surf-deployment

Release historycaution

Only two releases exist, with no release in the last 12 months and the latest published in October 2022. The release notes for this version provide some documentation, but the long gap lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the absence of recent releases. The repository is not archived, but there is no observed recent activity to offset the maintenance concern.

Repo toolingcaution

Composer build tooling is present, supporting a conventional PHP project workflow. No security scanning tooling was detected, which limits the positive value of the otherwise adequate build setup.

Security policycaution

The repository has no security policy and no security scanning tools were detected. For a small deployment library this is a transparency and maintenance gap, though it is not evidence of a security incident.

Workflow auditcaution

The single workflow was fully analyzed with no high- or medium-confidence findings, no untrusted checkout, and no script injection. However, all four action references are unpinned, leaving a reproducibility and workflow supply-chain hygiene gap.