dpi/pinto

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of currently limited maintenance activity despite a recent push and release history.

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected; this is a hygiene gap rather than evidence that the package is unmaintained.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

Version 0.5.0-beta2 is explicitly a prerelease, so its API and behavior may still change; the low recent prerelease share provides some compensating stability.

Workflow auditcaution

The workflow audit completed fully with no untrusted checkouts, script injection, or high-severity findings, but all 10 action references are unpinned, reducing build reproducibility and update safety.