mlocati/ip-lib

Repo commit activitycaution

No commits and no active maintainers were recorded during the last three months, which is a maintenance warning. However, the current release, recent repository push, and nine recently merged pull requests provide compensating evidence of ongoing work.

Repo toolingcaution

Composer is used for the build, but no security scanning tool was detected. This is a modest transparency and hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting guidance undocumented. This is a limited transparency gap for an otherwise established project.

Token permissionscaution

The only workflow lacks top-level token permissions, so its intended permission scope is not explicitly documented. No workflow was found with top-level write permissions.