omikron/factfinder-communication-sdk

Release historycaution

The package has 11 releases since January 2021, but none in the last 12 months and the latest was in June 2024, indicating more than two years without a registry release at collection time.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This weakens evidence of active maintenance, although the repository is not archived and was pushed more recently than the package release history suggests.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That modestly reduces confidence in the project's maintenance hygiene.

Security policycaution

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is not evidence that the package is unsafe by itself.

Workflow auditcaution

The single analyzed workflow completed without dangerous triggers, untrusted checkouts, or audit findings. However, all 3 of 3 action references are unpinned, which leaves the build exposed to moving action revisions.