novaris-dev/framework

Release historycaution

This is the only release and was published less than one hour before collection, so there is little evidence of long-term release stability despite substantial recent repository activity.

Repo bus factorcaution

All 345 recent commits came from one contributor, creating a concentrated maintenance dependency; organization ownership provides some handoff capacity but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so vulnerability reporting expectations are not documented.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkout, injection, or high-confidence security findings. However, both analyzed action references are unpinned, which weakens build reproducibility and supply-chain hygiene.