infinityfree/mofh-client

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. This is a meaningful maintenance slowdown, although the release history shows activity within the last year.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanner is a hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, though it is not by itself evidence of abandonment.

Version stabilitycaution

Version 0.10.0 is not a stable major release, which leaves some compatibility risk, but it is not a prerelease and recent releases have been stable.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all seven action references are unpinned, leaving avoidable supply-chain hygiene risk.