roots/bedrock-autoloader

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of currently quiet maintenance despite the recent push timestamp.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving an avoidable hygiene gap.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting guidance undocumented.

Version stabilitycaution

This is a beta release, so its API may still change; the prerelease share is only 14.3%, which provides some compensating stability evidence.

Workflow auditcaution

All three workflows were analyzed with no audit findings or untrusted code paths, but all five action references are unpinned, allowing action updates to change the build unexpectedly.