jeffreyvanrossum/paver

Maintainerscaution

Only one registry publishing account is listed, which limits publishing redundancy. The linked repository's recent activity from two contributors provides some compensating maintenance capacity.

Repo toolingcaution

Composer build tooling is used, but no security scanning tool was detected. The missing scanner is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Token permissionscaution

The only workflow does not declare top-level token permissions. No write permissions were observed, but explicit least-privilege settings would provide stronger workflow transparency.

Version stabilitycaution

Version 0.4.3 is not from a stable major release, so compatibility expectations are lower even though it is not marked as a prerelease and recent releases have not been prereleases.