piko/router

Release historycaution

The latest release was over 3 years ago, with no releases in the last 12 months. The seven-release history shows an established package, but the current maintenance gap is a meaningful concern.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the release gap and indicating no recent maintenance activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than evidence of abandonment.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no injection, untrusted-checkout, or severity findings. However, both action references are unpinned, which weakens build reproducibility; the lack of a top-level permissions block is acceptable here because the workflow has no top-level write permissions.