liberusoftware/profiles

Release historycaution

The package is only 50 days old, despite 11 releases in that period; the compressed release cadence shows activity but gives little evidence of long-term stability.

Repo bus factorcaution

Two contributors are active, but one accounts for 8 of 9 commits, so maintenance is substantially concentrated in one person. Organization backing provides some handoff capacity but does not remove the concentration risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool is reported. That leaves a modest transparency and maintenance gap for a package intended for application integration.

Security policycaution

The repository has no SECURITY.md or other reported security policy. This makes vulnerability reporting and response expectations less clear.

Workflow auditcaution

All three workflows were analyzed successfully and had no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all 3 of 3 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.