restruct/dot-static

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This weakens evidence of ongoing maintenance, although the recent registry release provides some compensating publishing activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That limits automated assurance for a package distributing a compiled executable.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, though it is not by itself evidence that the release is unsafe.