echo-fusion/sessionmanager

Release historycaution

The package is less than one day old with three releases and a median interval of about 1 hour 20 minutes, so long-term maintenance is not yet demonstrated.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, leaving maintenance capacity unproven; the repository's same-day push and three merged pull requests partly support that this is an initial project rather than an abandoned one.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and assurance gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

The single workflow was fully audited, uses read-only permissions, and has no untrusted checkout or injection findings; however, both referenced actions are unpinned, so their versions are not reproducibly fixed.