endroid/composer-message

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating limited recent development activity despite the recent push and release.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no published security policy, so vulnerability-reporting and response expectations are not documented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all five action references are unpinned, which weakens build reproducibility and update control.