ecphp/cas-bundle

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, which is a meaningful maintenance concern. A release and merged pull request are recent, but they do not fully offset the lack of sustained commit activity.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear for a security-sensitive authentication bundle.

Workflow auditcaution

All 10 analyzed action references are unpinned, and a high-confidence medium-severity finding identifies an archived action in the release workflow. No untrusted checkout, script injection, dangerous trigger, or top-level write permission was observed, limiting the impact to caution.