julienbohy/git-profiler-bundle

Release historycaution

The package is only 65 days old, with four releases over its first 28 days; the rapid early cadence shows activity but provides limited long-term maintenance evidence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest repository-hygiene gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and handling less transparent for users of this integration package.

Version stabilitycaution

Version 0.2.1 is not a stable major release, so its API and behavior may still change even though it is not marked as a prerelease.

Workflow auditcaution

All three workflows were analyzed cleanly with no untrusted checkouts, script injection, or auditor findings. However, all three action references are unpinned and one workflow grants top-level write permissions, creating release-automation hygiene risk without a demonstrated exploit path.