discoverygarden/embargo_inheritance

Repo commit activitycaution

No commits and no active maintainers were recorded in the last 3 months. This weakens evidence of current maintenance, although the recent release and push provide some compensating evidence.

Repo popularitycaution

The repository has no stars or forks and only four watchers, indicating limited adoption signals. Popularity is supporting evidence, so this is a modest concern rather than a health verdict.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning coverage is a modest supply-chain hygiene gap.

Security policycaution

The repository has no security policy, leaving no documented vulnerability-reporting process for this integration module.

Workflow auditcaution

All three workflows analyzed successfully, with no untrusted checkout or script-injection findings, but all four action references are unpinned and a high-confidence medium-severity secrets-inherit finding exposes broader credentials than needed. These create real build-hygiene risk without making the release unfit on their own.