jul6art/datatable-bundle

Maintainerscaution

Only one account has registry publish access, which creates some publishing concentration; repository activity from two contributors provides partial compensation for maintenance capacity.

Release historycaution

The package is only 48 days old but has 41 releases, with a median interval of about 4 hours; this shows activity but also limited maturity and unusually rapid change.

Repo toolingcaution

Composer is used for the build, but no security scanning tool is present; the repository's separate security policy provides some transparency but does not replace scanning.

Workflow auditcaution

The only workflow was fully analyzed, uses read-only permissions, and has no untrusted checkout or injection findings, but all 9 action references are unpinned, weakening build reproducibility and supply-chain hygiene.