joanfabregat/secure-token-generator

Release historycaution

The package has five releases over about two years, but only one release in the last 12 months, indicating a modest and recently slower cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the three months before collection; the recent release partly offsets this, but ongoing maintenance capacity remains uncertain.

Repo toolingcaution

The project uses Composer build tooling, but no security-scanning tool was detected, leaving a modest security-process gap.

Security policycaution

The repository has no published security policy, which makes vulnerability reporting and response expectations less transparent.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but both action references are unpinned, weakening build reproducibility.