lampi87/hl7

Maintainerscaution

One registry publishing account is listed. That is a limited publishing base, but the linked repository is owned by the same individual, so it is not an unexplained mismatch.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This weakens evidence of ongoing development, although the frequent recent registry releases partly compensate.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy. For a library that parses and sends HL7 data, the missing vulnerability-reporting guidance reduces maintenance transparency.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned. The lack of a top-level permissions block is acceptable on its own.