plaisio/config-vault-plain-file

Release historycaution

The package has only five releases since November 2019 and none in the last 12 months; this indicates a slow maintenance cadence, though the latest release is recent enough to avoid an abandonment verdict.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, consistent with the slow release history and raising a maintenance concern.

Repo toolingcaution

Composer and Phing provide build tooling, but no security scanning tools are configured, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

The workflow is fully analyzed, uses read-only permissions, and has no audit findings or untrusted execution paths. However, all four action references are unpinned, which weakens build reproducibility and action-integrity hygiene.