oriceon/cnp

Release historycaution

This is the only release, published about 17 months ago, with no releases in the last 12 months. That leaves maintenance and compatibility uncertain despite the stable 1.0.0 version.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the long gap since the only release and raising abandonment risk.

Repo toolingcaution

Composer is used for builds, but no security scanning tool is configured. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The sole workflow was fully analyzed with no injection or high-confidence audit findings, but both action references are unpinned. The missing top-level permissions block is acceptable on its own.