pieceofcake2/upload

Release historycaution

This package is less than a day old and has only two releases, so its release process and long-term maintenance pattern are not yet established.

Repo commit activitycaution

The repository reports zero commits and zero active maintainers in the last three months, so it does not yet demonstrate an established maintenance cadence; the recent push does not compensate for that history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and defensive-hygiene gap.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts or script injection, but all 13 action references are unpinned, the workflow has top-level write permissions, and high-confidence unpinned-image findings were reported.