emanate/kitasa

Repo commit activitydanger

There were 0 commits and 0 active maintainers in the last three months, despite the package being released recently enough that ongoing maintenance would be expected. This is a meaningful abandonment risk.

Release historycaution

The package has four releases in the last 12 months, but all were published in a very short burst on the same day, followed by no observed commit activity. The burst shows initial delivery but not sustained maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest process gap that compounds the repository's limited recent activity.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented. This lowers transparency, although the package does have a linked and matching source repository.

Workflow auditcaution

All 5 analyzed action references are unpinned, and one workflow grants top-level write permissions. The audit found no untrusted checkout or script injection, so this is a hygiene concern rather than a severe risk.