pieceofcake2/vite

Release historycaution

The package is only 1 day old, despite five releases in that period; the rapid initial cadence shows activity but provides almost no evidence of sustained maintenance.

Repo commit activitycaution

There were no commits and no active maintainers during the last 3 months, although the repository was pushed recently and the project is only 1 day old; this limits evidence of durable maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected; this is a modest transparency gap rather than evidence of unsafe code.

Workflow auditcaution

The only workflow was fully analyzed with no audit findings, but all 12 action references are unpinned and the workflow grants top-level write permissions. These are actionable workflow-hygiene concerns even without an untrusted trigger or sink.