m1ge0/bootsjet

Maintainerscaution

Only one account has registry publish access. The matching user-owned repository and recent releases provide some compensation, but the maintainer base remains fragile.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, despite the recent release history; this is a meaningful warning about current maintenance capacity.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. The release notes report a clean Composer audit, which partly compensates for the repository tooling gap.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but both action references are unpinned. That leaves avoidable workflow supply-chain exposure, even though permissions are not broadly write-enabled.