kehet/artifactsmmo-client

Release historycaution

This is the package's only release, published about 9 months ago, so there is too little history to establish a dependable maintenance pattern.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, weakening evidence that issues or API changes will be addressed.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency gap.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

Both workflows grant top-level write permissions and all 4 action references are unpinned. The audit found no untrusted checkout, injection, or high-confidence workflow finding, so this is a hygiene concern rather than a severe risk.