discoverygarden/dgi_fixity

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning, although the recent release and push provide partial compensation.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while one issue and one pull request remain open. This adds a modest sign of limited current project activity.

Repo toolingcaution

Composer is used for builds, but no repository security-scanning tool was detected. That is a hygiene gap rather than evidence that the release is unsafe on its own.

Workflow auditcaution

Both workflows were analyzed successfully with no reported audit findings, and the pull_request_target trigger has no untrusted checkout or script-injection sink. However, all three action references are unpinned, leaving avoidable workflow supply-chain exposure.