innmind/s3

Release historycaution

The project has existed for about 7 years with 15 releases, but only one release in the last 12 months; this suggests a modest and slowing release cadence rather than abandonment.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, despite a recent release and push. That points to quiet ongoing maintenance and raises abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This leaves a gap in the project's automated security hygiene.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

All 13 analyzed action references are unpinned, and a high-confidence medium-severity secrets-inherit finding appears in the release workflow. The workflows have no dangerous trigger or untrusted checkout findings, but the release hygiene remains a concern.