nietthijmen/sitemap-compare

Release historycaution

Only two releases have been published, although both arrived within the last 12 months and the latest release is recent. This shows activity but provides limited evidence of long-term maintenance.

Repo commit activitycaution

No commits or active maintainers were recorded during the last three months. The recent release and push partly offset this, but the project still has limited demonstrated maintenance depth.

Repo toolingcaution

Composer and Box provide build tooling, but no security-scanning tools are configured. That is a repository hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted-code sinks, but all four action references are unpinned and the workflow grants top-level write permissions. These are moderate reproducibility and least-privilege gaps, not severe risks on their own.