novosga/scheduling-bundle

Release historycaution

The package has existed for over 4 years but only 4 releases, with a median interval of about 496 days and 1 release in the last 12 months. The latest release was recent, which partly offsets the slow cadence.

Repo bus factorcaution

All 2 recent commits came from one contributor, leaving the project dependent on a single active maintainer for current changes. Organizational backing provides some ability to hand maintenance off, but no second active contributor is shown.

Repo toolingcaution

The repository uses Composer build tooling but reports no security scanning tools, leaving automated security coverage unclear.

Security policycaution

The repository has no published security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but both of its 2 action references are unpinned. The missing top-level permissions block is not a concern on its own.