rector/extension-installer

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release partly offsets this, but the lack of current development activity is a maintenance caution.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a package installed into developer environments, that is a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy. This does not show a vulnerability, but it leaves the process for reporting and handling security issues unclear.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all three action references are unpinned. That leaves avoidable update and provenance uncertainty.