netglue/primo

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This is a real maintenance concern, even though recent releases and merged pull requests provide some compensation.

Repo toolingcaution

The project uses Make and Composer, but no security-scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. This reduces transparency for reporting vulnerabilities but is not severe enough to make the release unfit on its own.

Workflow auditcaution

Both workflows were fully analyzed with no reported audit findings or unsafe triggers, but all 9 action references are unpinned. The workflows lack top-level permissions blocks without showing broad top-level write access, so the main concern is mutable build tooling.