rah/rah_privileges

Workflow auditdanger

Both workflows were analyzed successfully, but all 9 action references are unpinned, and the CI workflow has two high-confidence artipacked findings because checkout credentials are not explicitly disabled. These are material release-process hygiene risks.

Release historycaution

The package has four releases since March 2015, with no registry release in the last four years; this indicates a meaningful maintenance slowdown despite the linked repository being updated more recently.

Repo commit activitycaution

There were no commits and no active maintainers in the three months before collection. This conflicts with the more recent repository push and lowers confidence in ongoing development capacity.

Repo toolingcaution

The repository uses Make and Composer, but no security scanning tools were detected. This is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

No security policy was found in the repository, reducing transparency around vulnerability reporting and maintenance response.