ernestdefoe/folio

Release historycaution

This package was first released today and has only two releases, so there is not yet evidence of sustained maintenance or a mature release process.

Repo commit activitycaution

There were no commits or active maintainers in the measured three-month window, but the package is only hours old, so this is limited evidence rather than proof of abandonment.

Repo toolingcaution

The repository uses Composer for builds, but no security scanning tool was detected; this is a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting expectations unspecified for consumers.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkout, injection, or audit findings. One workflow grants top-level write permissions, which is a mild hygiene concern without an untrusted trigger or sink.