nextcloud/kitinerary-bin

Release historycaution

The package has made five releases since January 2024, but none in the last 12 months; the latest release was about 16 months ago. This suggests reduced maintenance momentum for a binary distribution package.

Repo commit activitycaution

There were no commits and no active maintainers during the last three months. Although the repository was pushed recently, the measured development activity still indicates a thin maintenance signal.

Repo toolingcaution

The repository uses Composer build tooling but reports no security scanning tools. The missing scanning is a hygiene gap rather than a direct abandonment indicator.

Workflow auditcaution

All six workflows were analyzed with no audit findings or untrusted checkout and script-injection paths. However, 10 of 14 action references are unpinned, leaving avoidable build-integrity risk; the single workflow with top-level write permissions is only a mild concern without an untrusted trigger.