micropackage/templates

Release historycaution

The package has made no registry release in nearly five years, which raises abandonment and compatibility concerns even though the repository was pushed recently.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, weakening the evidence of ongoing maintenance despite the recent push timestamp.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest repository-hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

All 14 analyzed action references are unpinned, and the audit found high-confidence template-injection patterns; the latter is hygiene risk here because no untrusted trigger or checkout was reported.