mpl/matomo

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Frequent registry releases provide some compensation, but this source-repository inactivity remains a maintenance concern.

Repo toolingcaution

The repository uses Composer, but no security scanning tools were detected. Build tooling is present, while the missing scanning coverage is a modest transparency gap.

Security policycaution

No security policy was found in the linked repository. For a full analytics application handling potentially sensitive data, this leaves vulnerability-reporting expectations unclear.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all six action references are unpinned, weakening build reproducibility and supply-chain controls.