naf/flow

Release historycaution

This package was released today and has only one release, so there is not yet enough history to establish maintenance consistency.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest repository-hygiene gap.

Security policycaution

The repository has no published security policy, which reduces transparency for reporting and handling vulnerabilities.

Version stabilitycaution

Version v0.1.0 is an early major version, which indicates limited maturity even though it is not marked prerelease.

Workflow auditcaution

The workflow was fully analyzed with read-only permissions and no dangerous findings, but all five action references are unpinned, weakening build reproducibility and supply-chain control.