ottosmops/ocfl

Release historycaution

Only one release exists, published about 5.5 months ago, so there is little evidence of an established release cadence or ongoing delivery.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, a meaningful sign that maintenance may have paused after the initial release.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving automated security coverage unclear.

Security policycaution

The repository has no security policy, so users have no documented vulnerability-reporting process.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned, weakening build reproducibility and update safety.