lm-commons/lmc-user-repository

Repo commit activitycaution

There were no commits and no active maintainers in the last roughly four months, which is a maintenance concern, though the recent release history shows the project was active before that pause.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected; for this small interface package, that is a modest transparency gap rather than a severe risk.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous audit findings or untrusted sinks, but all five action references are unpinned, leaving avoidable build-integrity exposure.