sanderdlm/skeleton

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the registry shows frequent releases and the repository was pushed recently, the recent development pause is a meaningful maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This modestly reduces ongoing supply-chain assurance.

Security policycaution

The linked repository has no security policy. That leaves vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed and uses read-only permissions, with no untrusted checkout or injection findings. However, all 5 action references are unpinned, leaving them exposed to upstream reference changes.