doublesecretagency/craft-upvote

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign of limited ongoing maintenance capacity despite the current release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured, leaving automated security hygiene limited.

Security policycaution

The repository has no security policy, reducing clarity about how vulnerabilities should be reported and handled.

Workflow auditcaution

The single workflow was fully audited with no dangerous triggers or findings and scopes permissions at job level, but its only action reference is unpinned, weakening reproducibility.