jimersylee/mobile-locator

Release historycaution

This is a 109-day-old package with only one release, so there is little release history to demonstrate sustained maintenance.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. Because the package is still young, this is a meaningful but not conclusive maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, reducing clarity about how vulnerabilities should be reported and handled.

Workflow auditcaution

The only workflow analyzed successfully, with no untrusted checkout or injection findings, but it grants top-level write access and uses its sole action unpinned. These are hygiene concerns rather than severe risks.