omasat/palet-framework

Release historycaution

This package is only 44 days old and has a single release, so there is little evidence of sustained maintenance or release reliability.

Repo bus factorcaution

All 17 recent commits came from one contributor, leaving maintenance highly dependent on a single person.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a gap in automated security checks.

Security policycaution

The repository has no security policy, which leaves vulnerability reporting and response expectations undocumented for this security-sensitive framework.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but both action references are unpinned, weakening build reproducibility and supply-chain hygiene.