open-feature/flagd-provider

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past 3 months. The recent release and push show activity at the release point, but the short-term development gap still lowers maintenance confidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a library distributed through a package registry, that is a meaningful security-process gap.

Security policycaution

The repository has no security policy. This weakens transparency about how vulnerabilities are reported and handled, although it is not evidence of a vulnerability itself.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but its only action use is unpinned. All references being unpinned leaves the build exposed to action changes and is a hygiene concern.