komma-softhouse/asice-engine

Release historycaution

This is the first release, published less than one day ago, so there is no release cadence or track record to demonstrate sustained maintenance.

Repo commit activitycaution

The repository shows zero commits and zero active maintainers in the last three months, but this is partly explained by the package being newly released and having a merged pull request during its initial publication window.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap for a package handling signing and validation workflows.

Workflow auditcaution

The sole workflow was fully analyzed with no injection or high-severity findings, but both action references are unpinned, leaving the build exposed to moving action versions.