dejwcake/craftable

Repo commit activitycaution

The repository shows zero commits and zero active maintainers in the last three months, which indicates a recent pause in development despite the latest release being recent.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

No repository security policy was found, reducing clarity about how vulnerability reports are handled.

Workflow auditcaution

All five analyzed action references are unpinned, which weakens build reproducibility. The workflow has no untrusted checkout or script-injection findings, and lacks top-level permissions without using broad write permissions.