meritum/bus-module

Release historycaution

The package is only 105 days old and has two releases, with a median interval of about 105 days. That is limited history, but it is not yet evidence of abandonment for such a young project.

Repo commit activitycaution

The repository records zero commits and zero active maintainers over the past three months. Although it was recently pushed and released, the lack of observed commit activity reduces confidence in ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap, not a severe risk by itself.

Security policycaution

The repository has no security policy. That leaves vulnerability-reporting expectations unclear for consumers of this library.

Workflow auditcaution

The single workflow was fully analyzed with no unsafe triggers, untrusted checkouts, or audit findings, but both of its two action references are unpinned. Unpinned actions weaken build reproducibility and supply-chain control.