fond-of-oryx/jellyfish-gift-card

Release historycaution

The package has only three releases and none in the last three years, with the latest release more than three years old. This materially raises staleness risk despite the repository being pushed more recently.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The 2025 push shows the repository was not abandoned long ago, but current activity remains a maintenance concern.

Repo toolingcaution

The repository uses Make and Composer, showing build tooling, but no security scanning tools were detected. This is a modest transparency and maintenance weakness.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

All three workflow action references are unpinned, weakening build reproducibility and supply-chain hygiene. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-severity findings.