kevinpirnie/kpt-datatables

Workflow auditdanger

Both workflows were analyzed completely and have no untrusted checkouts or script-injection sinks, but all 6 action references are unpinned. The release workflow also has three high-confidence template-injection findings, which is a significant workflow hygiene concern even without a dangerous trigger.

Maintainerscaution

One registry maintainer is consistent with the repository being owned by an individual, but it leaves little visible publishing redundancy if that maintainer becomes unavailable.

Release historycaution

This is the registry's first observed release, published 0 days ago, so there is no demonstrated release cadence or long-term maintenance history yet.

Repo commit activitycaution

The repository records 0 commits and 0 active maintainers over the last 3 months. Because the package and repository are newly observed, this is limited evidence rather than proof of abandonment, but sustained maintenance is not yet demonstrated.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest security-process gap.