hostnet/entity-plugin-lib

Dependency profilecaution

The package has five runtime dependencies, including PHP, Composer plugin API, Symfony Filesystem, Twig, and a type resolver. This is a moderate dependency surface that adds some maintenance exposure but is not unusually broad.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, which is a meaningful maintenance concern. However, the package released recently and the repository merged two pull requests in the last month, partially offsetting the inactivity signal.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This weakens automated security and maintenance coverage.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented. This is a transparency gap, though it is not by itself evidence that the package is unsafe.

Token permissionscaution

The one workflow lacks top-level token permissions, so its permissions are not explicitly constrained at that level. No top-level write permissions were detected, but the configuration is less clear than a declared read-only policy.