kevinpirnie/kpt-utils

Release historycaution

The package has only one release over its 111-day lifetime, so there is not enough release history to establish sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, leaving current maintenance activity unproven.

Repo toolingcaution

Composer is used for the build, but no security scanning tool is configured, leaving less automated evidence of ongoing project hygiene.

Security policycaution

The repository has no security policy, which reduces transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

All five analyzed action references are unpinned, and the release workflow has high-confidence template-injection findings. The audit found no untrusted checkout or script-injection sink, so this is workflow hygiene risk rather than a severe dependency-health failure.