discoverygarden/islandora_citations

Repo commit activitycaution

There were no commits and no active maintainers during the last 3 months, a meaningful maintenance concern despite the recent release.

Repo issue activitycaution

The repository has 7 open issues and 4 open pull requests, but no new or closed issues and no merged pull requests in the last month, indicating limited recent collaboration.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are configured, leaving automated security coverage unclear.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response procedures.

Workflow auditcaution

Both workflows were analyzed successfully and contain no reported audit findings; the pull_request_target trigger has no untrusted checkout or script-injection sink. However, all four action references are unpinned, which is a workflow hygiene weakness.