meraki/composition

Release historycaution

This is the only release, published about eight months ago, so there is little evidence of an established release cadence. The repository and release metadata provide some transparency, but the maintenance record remains limited.

Repo commit activitycaution

There were no commits and no active maintainers in the past three months. For a package with only one release, this is meaningful evidence that maintenance has not yet been demonstrated.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations unspecified. This is a transparency gap, though it is not evidence of a security defect.

Version stabilitycaution

The assessed version is a prerelease and all recent releases are prereleases, so API and behavior stability are not yet demonstrated.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all five action references are unpinned, so workflow dependencies are exposed to mutable upstream changes.