generoi/genero-cmp

Package scaffoldingcaution

A substantial README is present and the repository uses GitHub Releases, which compensates for the missing changelog. Tests are absent both from the artifact and repository, leaving a genuine verification gap for this plugin.

Repo popularitycaution

The repository has only 6 stars, 0 forks, and 2 watchers, so external adoption is limited. This is supporting context rather than a health verdict, and the active maintenance evidence is more significant.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are configured. The missing scanning is a security-hygiene gap, though it is not evidence of abandonment by itself.

Security policycaution

The repository has no SECURITY.md or other detected security policy, reducing vulnerability-reporting transparency.

Token permissionscaution

Both workflows lack top-level token permissions declarations. Although no write permissions were detected, explicit least-privilege configuration would provide stronger CI security hygiene.