lyhty/macronite

Repo commit activitycaution

There were no commits and no active maintainers during the last three months. Although a release was published at the start of that period, the lack of ongoing commit activity is a maintenance concern.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, so this modestly reduces confidence in project visibility but does not establish abandonment by itself.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. The missing scanning is a hygiene gap for a package distributed to consumers.

Security policycaution

The repository has no security policy. That limits transparency about vulnerability reporting and response, though it is not evidence of a vulnerability in the release.

Workflow auditcaution

The single workflow uses read-only permissions and has no detected audit findings, but all two action references are unpinned. Unpinned actions leave dependency versions mutable and create a supply-chain hygiene gap.