majesticdev/milsim-id-card-plugin

Release historycaution

The package is newly published, with an age of 0 days and six releases issued on the same day. This is a maturity caution, partly offset by the strong accompanying repository activity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanner is a modest transparency gap, not evidence of abandonment.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although the active organization and tested source provide some compensation.

Workflow auditcaution

The sole workflow was fully analyzed, uses read-only permissions, and has no dangerous triggers or audit findings. However, both action references are unpinned, creating a minor reproducibility and supply-chain hygiene concern.