deviantintegral/composer-gavel

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months. Although the release history is recent, this lack of current development activity lowers confidence in ongoing maintenance.

Repo issue activitycaution

There was no new or closed issue or pull-request activity in the last month, while 1 issue and 1 pull request remain open. This is a modest sign of limited current project attention.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is less significant for this small Composer version-check plugin than for a security-sensitive library.

Workflow auditcaution

All 6 workflows were analyzed with no audit findings, no untrusted checkouts, no script injection, and all 13 action references pinned. Three workflows grant top-level write permissions, which is a mild hygiene concern, but no untrusted path reaches those permissions.