inspyrenees/umami-bundle

Release historycaution

All six releases arrived within about 17 hours, and there has been no newer release over roughly nine months. This suggests an immature launch followed by uncertain maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, with the last push about nine months ago. That is a meaningful abandonment concern for a new package.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This leaves a transparency and maintenance gap for a package that handles API integration.

Security policycaution

The repository has no security policy. This weakens the documented process for reporting and handling vulnerabilities, though it is not severe on its own.

Workflow auditcaution

The workflow audit completed successfully with no dangerous sinks or audit findings, but both action references are unpinned. That is a supply-chain hygiene gap, while the lack of a top-level permissions block is acceptable on its own.