ebrana/cz-bank-account-validator-bundle

Release historycaution

Only two releases have appeared over about 10 months, with the latest release roughly 10 months ago. This is a limited track record and leaves maintenance continuity uncertain.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. For a recently released package, that is a meaningful sign of slowing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy. That makes vulnerability reporting and response expectations less clear for adopters.

Workflow auditcaution

Both workflows were analyzed successfully and no dangerous audit findings were reported, but all eight action references are unpinned and one workflow grants top-level write permissions. These are avoidable supply-chain and permission-hygiene weaknesses.