nodelapay/nodela

Release historycaution

This is the only release, published 210 days ago, so there is not enough release history to demonstrate an established maintenance cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, a meaningful warning that maintenance may have stalled after the initial release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving automated security hygiene less visible.

Security policycaution

The repository has no security policy, so there is no documented process for reporting and handling vulnerabilities.

Workflow auditcaution

All five analyzed action references are unpinned, which weakens build reproducibility. One workflow grants top-level write permissions, but the audit found no untrusted trigger, checkout, script injection, or other high-confidence dangerous finding.