greenterfin/core

Release historycaution

This package has only one release, published 562 days ago, with no releases in the last 12 months. That limits evidence of an established release and maintenance cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This weakens confidence in ongoing maintenance, despite the repository remaining unarchived.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. The missing scanning coverage is a moderate repository hygiene gap.

Security policycaution

The repository has no security policy. This reduces transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The single workflow was fully analyzed and had no dangerous audit findings, triggers, or untrusted checkouts, but both action references are unpinned. That leaves the workflow exposed to upstream action changes.