echo-fusion/templatemanager

Release historycaution

The package is only 0 days old, with three releases arriving within hours. That shows active initial publishing but provides no evidence of sustained maintenance yet.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Because the package is only 0 days old, this mainly means sustained maintenance is unproven rather than clearly collapsed.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency gap, not evidence of unsafe code by itself.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The sole workflow was fully analyzed, uses read-only permissions, and has no reported high-confidence findings. However, both action references are unpinned, reducing build reproducibility and supply-chain control.