imponeer/smarty-sunrise-http-router

Release historycaution

The package has 11 releases over about four years, but no releases in the last 12 months; this lowers confidence in ongoing maintenance without indicating abandonment on its own.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. A recent repository push is compensating evidence that it is not archived, but current development activity remains quiet.

Security policycaution

The repository has no published security policy. This is a transparency gap, but it is moderate because the project does use Dependabot scanning.

Workflow auditcaution

All three workflows were analyzed successfully, but all 8 action references are unpinned and a high-confidence bot-conditions finding reports spoofable actor context. There are no untrusted checkouts or script-injection findings, limiting the risk to workflow hygiene rather than a severe release threat.