dmytrof/access-permissions-bundle

Release historydanger

The package has had no release in more than five years, despite 11 releases overall. This prolonged release silence is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and leaving current maintenance capacity unconfirmed.

Repo toolingcaution

Composer is used for the build, but no security scanning tooling is present. This is a modest transparency and maintenance gap for a package with no recent activity.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This adds a transparency gap, though it is less serious than the maintenance silence.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers or audit findings, but all four action references are unpinned, reducing build reproducibility and supply-chain hygiene.