m6web/daemon-bundle

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months. A same-day release and long history reduce abandonment concern, but recent development activity is still a material weakness.

Repo toolingcaution

Composer and Make tooling are present, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

The single workflow was fully analyzed without dangerous triggers, sinks, or audit findings, but both of its action references are unpinned, weakening build reproducibility and action supply-chain hygiene.