libredte/libredte-lib-core

Release historycaution

The package is nearly two years old and has had no release in the last 12 months, which raises release-maintenance concerns. However, the linked repository has recent commit activity, partly offsetting the stale registry cadence.

Repo bus factorcaution

One contributor made 31 of 33 recent commits, leaving maintenance heavily concentrated despite a second active contributor. Organization backing provides some handoff capacity but does not remove the concentration risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a useful repository safeguard absent.

Security policycaution

The repository has no security policy, making vulnerability reporting and response expectations less transparent.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, and neither grants top-level write access. However, all seven action references are unpinned, which weakens build reproducibility and supply-chain hygiene.