kunoichi/icon

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last 3 months, despite the recent release. That weakens confidence in sustained maintenance between releases.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a meaningful oversight gap for a package distributed to other projects.

Security policycaution

The linked repository has no security policy, leaving no documented channel or process for reporting and handling vulnerabilities.

Workflow auditcaution

All 9 analyzed action references are unpinned, so workflow dependencies can change without a reviewed package update. The audit found no untrusted checkout, script injection, dangerous trigger, or high-confidence security finding.