nucleos/matomo-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. A recent release partly offsets this, but the current lack of development activity is a real maintenance concern.

Repo toolingcaution

The project uses Make and Composer, showing an established build process, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. For a package that integrates with applications and handles analytics requests, the absence of a documented vulnerability-reporting process lowers transparency.

Workflow auditcaution

All three workflows were analyzed without dangerous triggers or audit findings, but all four action references are unpinned. The audit is complete, yet unpinned actions leave avoidable build-supply-chain exposure.