migears/html-digest

Release historycaution

This is the first recorded release and the package is 0 days old, so there is no history yet to demonstrate sustained maintenance.

Repo bus factorcaution

All four recent commits came from one contributor, leaving maintenance dependent on a single person and increasing continuity risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency gap for a new package.

Security policycaution

The repository has no security policy, so its process for receiving and disclosing security issues is not documented.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkouts or script-injection findings, but both analyzed action references are unpinned, weakening reproducibility and update control.