fond-of-impala/company-users-rest-api

Release historycaution

The latest release was over 2 years ago, with no releases in the last 12 months; only 3 releases exist overall. This is a meaningful maintenance concern, although the repository remains active enough to have been pushed in November 2024.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, indicating currently stalled development. The non-archived state and organization ownership provide some continuity but do not replace recent activity.

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a minor concern for a maintained integration package, especially alongside the lack of security scanning.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all 3 of its action references are unpinned. That weakens build reproducibility and supply-chain hygiene without being a severe risk on its own.