iq2i/storia-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern despite the recent release history.

Repo toolingcaution

The project uses Make and Composer, but no security-scanning tools were detected. This is a modest hygiene gap rather than evidence of abandonment.

Version stabilitycaution

Version 0.5.0 is not a stable-major release, so API compatibility may still change, although it is not marked as a prerelease.

Workflow auditcaution

Both workflows were analyzed successfully with no detected sinks or audit findings, but all 16 action references are unpinned and one workflow grants top-level write permissions. These create reproducibility and least-privilege concerns without showing an active exploit path.