netflex/support

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The regular registry release history partly offsets this, but the lack of visible source activity remains a maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy. For a small support component this is a limited governance gap, but it leaves vulnerability-reporting expectations unclear.

Workflow auditcaution

The only workflow uses a pull_request_target trigger without an untrusted checkout or script-injection sink, so that trigger is not dangerous by itself. However, its top-level token permissions are write-enabled and its single action reference is unpinned, creating avoidable hygiene concerns.