decodelabs/compass

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. The package still had 4 releases in the last 12 months, which partly offsets but does not remove the concern about ongoing development capacity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a moderate transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a library that parses and processes network addresses, this weakens the documented path for reporting and handling vulnerabilities.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 7 action references are unpinned, leaving the build exposed to changes in referenced action revisions.