ouitoulia/skenografia

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the three months before collection. The recent release history provides some compensation, but this still raises a maintenance concern.

Repo popularitycaution

The repository has one star and no forks, indicating limited external adoption and review. Popularity is supporting evidence rather than a health verdict, so this is only a mild concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected, leaving a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less clear.

Workflow auditcaution

The workflow audit completed fully and found no untrusted checkouts or script injection, but all three action uses are unpinned and the high-confidence use-trusted-publishing finding indicates long-lived registry credentials. These are workflow hygiene and supply-chain concerns, not evidence that the package is malicious.