eighteen73/nebula-tools

Release historycaution

The package has had no release in 14 months, despite eight releases since June 2022. This points to slowing maintenance, though the project is not yet long-abandoned.

Repo commit activitycaution

There were no commits or active maintainers in the three months measured, which is a meaningful maintenance concern. The recent repository push provides some compensating evidence but does not establish ongoing activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The workflow was fully analyzed and uses read-only permissions with no dangerous audit findings. However, both of its two action references are unpinned, weakening build reproducibility and supply-chain hygiene.