empaphy/usephul

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern despite the recent push and strong release history.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a transparency and detection gap.

Security policycaution

The repository has no SECURITY.md or other detected security policy, so vulnerability reporting and response expectations are unclear.

Token permissionscaution

Three of four workflows declare top-level write permissions, and one workflow has no top-level permissions declaration; this is broader than necessary for routine automation and weakens workflow hygiene.