doublesecretagency/craft-sidekick

Release historycaution

The package has 23 releases over 532 days with a median interval of about 4 days, but only 1 release in the last 12 months; the recent slowdown warrants caution.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance concern, though the release was recently published.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected, leaving a security-maintenance gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous audit findings and job-level permissions, but its one action reference is unpinned, creating a modest reproducibility and supply-chain hygiene gap.