openprovenance/module-media-disclosure

Release historycaution

This is the first release, published today, so there is no track record of maintenance or release continuity yet.

Repo commit activitycaution

No commits or active maintainers were observed in the last three months. Because the repository was created or updated today, this limits evidence of sustained maintenance rather than proving abandonment.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The repository's included validation documentation and tests partly offset this tooling gap.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and pins both actions. It has one high-confidence low-severity adhoc-packages finding because it installs a package outside a lockfile.