mselbach/static-info-tables-ja

Lifecycle scriptscaution

A post-autoload-dump lifecycle script runs during installation, adding execution behavior that should be understood before adopting the package.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, indicating limited recent development activity despite the recent package release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

All 10 analyzed action references are unpinned, and the audit found a high-confidence template-injection finding in Deploy.yaml. The workflows were fully analyzed and had no untrusted checkout or script-injection counts, which limits the severity.