renolit/static-info-tables-nl

Project backingcaution

The repository is owned by an individual account rather than an organization, so the registry namespace does not provide organizational backing. The matching repository and recent release provide some compensating evidence, but not a broad maintainer capacity signal.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, despite a release during the broader period; this weakens evidence of continuing maintenance.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool is present. The missing scanning coverage is a modest repository hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but both of its two action references are unpinned. That leaves avoidable supply-chain drift risk, while the lack of a top-level permissions block is acceptable on its own.