intrfce/enum-attribute-descriptors

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Because a release was published during that period, this suggests quiet development rather than clear abandonment, but still limits evidence of sustained activity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

Version 0.5.1 is not a stable major release, but it is not marked as a prerelease and recent releases have not used prerelease versions.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four referenced actions are unpinned, so their versions can change outside the repository's review history.