hiqdev/hipanel-rbac

Release historycaution

The latest registry release was about five years ago, with no releases in the last 12 months. Recent repository commits provide some maintenance evidence, but the assessed version is still old and release activity has stalled.

Repo toolingcaution

The project uses Composer build tooling, but no security-scanning tools were detected. This is a modest transparency gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. This leaves vulnerability reporting and disclosure expectations unclear, though it does not by itself indicate unsafe code.

Workflow auditcaution

All 9 analyzed action references are unpinned, which weakens build reproducibility. The audit also reports a high-confidence trusted-publishing finding; the cache-poisoning findings are low-confidence hygiene concerns.