novosga/settings-bundle

Repo commit activitycaution

The repository had two commits in the last three months, so it is not inactive, but recent activity is limited.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, making vulnerability reporting and response expectations less clear for dependents.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both action references are unpinned, weakening build reproducibility and supply-chain integrity.