idleberg/vite-manifest

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. The recent release partly offsets this, but the quiet period is a maintenance concern.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. This is a modest transparency and assurance gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting guidance unspecified for consumers and maintainers.

Workflow auditcaution

Both workflows were fully analyzed with no audit findings or untrusted checkouts, and neither grants top-level write access. However, four of five action references are unpinned, which weakens build reproducibility.