konekt/xtend

Release historycaution

The package has had no release in the last 12 months, and its latest release was about 18 months ago. This is a meaningful maintenance concern, although the repository was pushed more recently.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanning is a modest transparency gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, injection findings, or write-wide permissions. However, all four action references are unpinned, weakening build reproducibility and supply-chain hygiene.