feiyun/tools

Maintainerscaution

Only one registry account has publish access. That is a thin publishing base for a package with production-oriented claims, although the repository's direct activity is the stronger maintenance evidence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, despite the recent release history; this weakens confidence in ongoing maintenance.

Repo toolingcaution

Composer and Make are used, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so users have no documented channel or process for reporting security issues.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous trigger or untrusted checkout, but both action references are unpinned and one uses an archived action; these are workflow hygiene risks rather than standalone severe threats.