innmind/graphviz

Repo commit activitycaution

There were only 3 commits in the last 3 months, so recent development activity is modest. The recent release provides some compensation, but the activity still limits evidence of a broad maintenance pace.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected. This is a modest transparency and assurance gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. For a small library this is a limited process gap, but it gives users no documented route for reporting vulnerabilities.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkouts or script injection, and none has top-level write permissions. However, all 6 action references are unpinned and two workflows have high-confidence secrets-inherit findings, weakening build reproducibility and credential hygiene.