fond-of-kudu/checkout-rest-api

Release historydanger

Only two releases were published, both in September 2023, with no release in about three years. This is substantial evidence of limited ongoing maintenance, though the package may be intentionally stable.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but current maintenance capacity is not demonstrated.

Repo toolingcaution

The repository uses Make and Composer, showing basic build tooling, but no security-scanning tools were detected. This is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, although it is not by itself evidence of unsafe code.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, weakening build reproducibility and supply-chain hygiene.