nadylib/imex

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is concerning for maintenance continuity, although the recent release provides some compensating evidence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. For a library with active dependencies, that leaves a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. This reduces transparency about vulnerability reporting and handling, though it is not by itself evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no detected dangerous sinks or audit findings. However, all 3 action references are unpinned, leaving avoidable build-integrity risk.