rezozero/intervention-request-bundle

Release historycaution

The package has 15 releases over about five years, but none in the last 12 months; the latest release was over a year ago, which suggests maintenance may have slowed.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, reinforcing the concern raised by the lack of releases in the last year.

Repo toolingcaution

The project uses Composer and Make, but no security scanning tools were detected; this is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented.

Workflow auditcaution

All three analyzed action uses are unpinned, which weakens build reproducibility. The low-confidence cache-poisoning finding is hygiene-level under the audit rules, and the workflow has no untrusted trigger or checkout sink.