intracto/smartcode-bundle

Release historycaution

The package has had no release in nearly seven years, with zero releases in the last 12 months. Its earlier cadence was active, but the long gap raises abandonment and compatibility concerns.

Repo commit activitycaution

There were no commits and no active maintainers in the measured three-month period. Together with the old latest registry release, this points to weak current maintenance capacity.

Repo toolingcaution

Composer is used for the build, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The only workflow was fully analyzed with no audit findings or untrusted checkout sinks. However, all three action references are unpinned, which weakens build reproducibility and supply-chain hygiene.