oneup/flysystem-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last 3 months. This weakens confidence in ongoing maintenance, although the package has a long release history and a release within the past year.

Repo issue activitycaution

There are 11 open issues and no open pull requests, with no issue or pull-request activity in the last month. This is a small maintenance concern, but not evidence of abandonment by itself.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanning coverage is a modest supply-chain hygiene gap for a dependency project.

Security policycaution

The repository has no documented security policy. This reduces transparency around vulnerability reporting, though it is not by itself evidence that the package is unsafe to use.

Token permissionscaution

The only workflow does not declare top-level token permissions. No write permissions were observed, but explicit least-privilege declarations would provide stronger workflow assurance.