hasnrizvee/dep-reaper

Release historycaution

This package has only one release, published about 179 days ago, so there is little evidence of an established release or maintenance pattern.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, which weakens evidence of ongoing maintenance for a recently published tool.

Repo toolingcaution

Composer and Box provide build tooling, but the repository reports no security-scanning tools, leaving a meaningful transparency and maintenance gap.

Security policycaution

No security policy is present, so users have no documented vulnerability-reporting path or stated security response process.

Workflow auditcaution

All 2 analyzed action references are unpinned, creating avoidable build-integrity risk. The workflow uses read-only permissions and has no untrusted checkout or script-injection findings, which limits the exposure.