netglue/prismic-cli

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although a recent release and push provide some compensating evidence, the absence of recorded commit activity still lowers confidence in active maintenance.

Repo toolingcaution

The project uses Make and Composer, but no security-scanning tools were detected. For a package that runs as developer tooling and connects to external services, this is a meaningful maintenance and transparency gap.

Security policycaution

No repository security policy was found. This makes vulnerability reporting and response expectations less clear, though it is not evidence of a security flaw by itself.

Workflow auditcaution

All 9 analyzed action references are unpinned, so workflow dependencies can change without a repository commit. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-confidence secret findings, and the missing top-level permissions blocks are acceptable on their own.