majesticdev/commandnet-discord-plugin

Release historycaution

The package is less than a day old and has only two releases, so its long-term maintenance and release reliability are not yet established.

Repo toolingcaution

The project uses Make and Composer build tooling, but no security-scanning tools are reported, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, which reduces transparency about vulnerability reporting and response expectations.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, or audit findings. However, all four action references are unpinned, which weakens build reproducibility and supply-chain hygiene.