dg/ftp-deployment

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern, although the release and recent repository push provide some compensation.

Repo toolingcaution

The repository uses Composer build tooling but reports no security-scanning tools, leaving a modest transparency and detection gap.

Security policycaution

The repository has no security policy, so users lack a documented route for reporting vulnerabilities.

Workflow auditcaution

The audit analyzed only two of three workflows and one file failed; all six analyzed action references are unpinned. No dangerous triggers, untrusted checkouts, script injection, or audit findings were reported, so this is a hygiene caution rather than a severe risk.