naluz/installer

Release historycaution

This is the first release, published today, so there is no release track record or evidence of sustained maintenance yet.

Repo commit activitycaution

There were no commits or active maintainers in the measured three-month window, although the repository and release were created today, making this primarily an unproven maintenance record rather than evidence of abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool is configured, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

Both workflows were analyzed without high-confidence audit findings, but all four action references are unpinned and one workflow grants top-level write permissions; this creates build reproducibility and token-scope concerns.