samwilson/basildon-skeleton

Release historycaution

This package has only one release, published 463 days ago, with no releases in the last 12 months. That suggests limited maintenance activity, although a small static site skeleton may not need frequent releases.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the past three months. Combined with its single-release history, this is evidence of limited ongoing maintenance.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tooling is present. For a small static skeleton this is a modest transparency and oversight gap rather than a severe risk.

Security policycaution

The repository has no security policy. This reduces transparency about vulnerability reporting and handling, though the package's small static-site scope limits the significance of the gap.

Workflow auditcaution

The sole workflow was fully analyzed with no injection or high-severity findings, but both action references are unpinned. The workflow also lacks a top-level permissions block, which is acceptable on its own.