league/construct-finder

Release historycaution

The package has 11 releases over about 4 years, with one release in the last 12 months; this shows ongoing publication but a light recent cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. The recent release partly offsets this, but the lack of current source activity is a maintenance concern.

Repo toolingcaution

The project uses Composer, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap, not evidence of a direct security problem.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted execution paths, but all 3 action references are unpinned, leaving builds more exposed to upstream action changes.