mulertech/application

Release historycaution

The latest registry release was nearly 21 months ago, with no releases in the last 12 months. Recent repository commits partly offset the concern, but the release gap still lowers confidence in ongoing delivery.

Repo bus factorcaution

One contributor made all 2 commits in the last 3 months, leaving maintenance dependent on a single active person. The matching repository and recent activity do not remove that concentration risk.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected. This is a transparency and supply-chain hygiene gap, though it is not severe by itself.

Security policycaution

The repository has no documented security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

All 18 analyzed action references are unpinned, and one workflow grants top-level write permissions. The audit found no untrusted checkouts, script injection, or high-severity findings, so this is a workflow hygiene caution rather than a severe risk.