krafsys/vercy-storage

Release historycaution

This is the first release, published today, so there is no release history or cadence demonstrating sustained maintenance.

Repo commit activitycaution

There were no commits in the previous three months and no active maintainers in that period, although the repository was pushed recently and the project is only a day old.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned, weakening supply-chain reproducibility.