oxygen/mod-import-export

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This weakens evidence of ongoing maintenance, even though the package had a recent release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy. That reduces transparency about how vulnerabilities are reported and handled.

Version stabilitycaution

Version 0.6.0 is not marked prerelease, but the 0.x major version indicates the public API may still change more readily than a stable-major release.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-confidence audit findings, but all three action references are unpinned, making the build less reproducible and resilient to upstream changes.