rougin/blueprint

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. This is a meaningful maintenance concern despite the release published about four months ago.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. That reduces transparency about vulnerability reporting and response expectations, though it does not by itself show that the package is unsafe.

Workflow auditcaution

The sole workflow was fully analyzed, uses read-only permissions, and has no detected injection or high-confidence audit findings. However, all three action references are unpinned, leaving build inputs less reproducible and increasing exposure to upstream action changes.