ernestdefoe/parley

Release historycaution

All 14 releases were published today, so the package shows active initial publishing but has no established maintenance history or sustained release cadence yet.

Repo toolingcaution

Composer is used for builds, but no security scanning tool was detected, leaving a modest repository-hygiene gap.

Security policycaution

The repository has no published security policy, which reduces transparency for reporting and handling vulnerabilities in this chat extension.

Workflow auditcaution

All three workflows were analyzed without audit findings or untrusted-trigger sinks, but all four action references are unpinned and one workflow grants top-level write permissions, creating a mild reproducibility and permissions concern.