jorenrothman/acf-builder

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, which is a meaningful maintenance concern and contrasts with the recent registry release count.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a moderate transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unclear for consumers of this library.

Workflow auditcaution

The single workflow grants top-level write permissions and all six action references are unpinned. The audit found no untrusted checkout, injection, or high-confidence dangerous findings, so this is workflow hygiene risk rather than a severe threat.