randomhost/icinga

Release historycaution

The package has existed for nearly ten years, but it has only four releases and none in the last twelve months. The latest release in August 2025 provides some evidence of recent maintenance, but the cadence is sparse.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the sparse release history, this raises the risk that fixes may not arrive promptly.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest repository hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no untrusted checkout or script-injection paths. The low-confidence cache-poisoning finding is hygiene at most under the audit rules, while both actions are unpinned and modestly reduce reproducibility.