nucleos/setlistfm

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern even though version 3.6.0 was released recently.

Repo toolingcaution

The repository uses Composer and Make, but no security-scanning tools were detected, leaving a security-hygiene gap.

Security policycaution

The repository has no published security policy, reducing transparency about vulnerability reporting and response.

Workflow auditcaution

Both workflows were analyzed without failed files, dangerous triggers, injection sinks, or audit findings. However, both use unpinned action references, a supply-chain hygiene weakness, while the absence of top-level permissions is acceptable on its own.