rougin/describe

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release and push provide some compensation, but the lack of current development is still a maintenance concern.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool is present in the repository. This is a modest transparency and hygiene gap, not evidence of unsafe code by itself.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities.

Workflow auditcaution

The workflow audit completed successfully, uses read-only permissions, and found no dangerous workflow patterns. However, all five analyzed action references are unpinned, which weakens build reproducibility and supply-chain hygiene.