kusikusicms/media

Release historycaution

This is the package's first release and it is 0 days old, so there is no release cadence or track record yet. Its newness limits evidence of maturity but does not by itself indicate abandonment.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, but the repository and package were created 0 days ago, so this is mainly a lack of history rather than evidence of collapsed maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency gap for a newly published package.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although the package's very recent creation limits how much weight this gap should carry.

Workflow auditcaution

The single workflow is fully analyzed and has no detected sinks or audit findings, but it uses a top-level write token and its only action reference is unpinned. These are workflow-hygiene concerns without an untrusted checkout or script-injection path.