genkgo/push

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months. A release was published during the broader period, but the recent absence of source activity lowers maintenance confidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a meaningful transparency and maintenance gap for a package handling push-service credentials and integrations.

Security policycaution

The repository has no security policy. That makes vulnerability reporting and response expectations less clear, though the package still has a maintained-looking release and source repository.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both action references are unpinned. The missing top-level permissions block is acceptable on its own; unpinned actions are a minor reproducibility and supply-chain hygiene gap.