lochmueller/sourceopt

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating a meaningful recent maintenance gap even though a release and push occurred earlier.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

All 8 analyzed action references are unpinned, and the audit found a high-confidence template-injection pattern in the release workflow. No untrusted checkout or script-injection sink was reported, so this is a workflow hygiene concern rather than a severe standalone risk.