se7enxweb/repository-forms

Dangerous workflowscaution

One of five workflows uses pull_request_target, which can require careful review because it runs with elevated event context. No untrusted checkout or script-injection patterns were detected, limiting the concern.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months. This is a meaningful maintenance concern, although the recent release history and March 2 repository push provide some counterevidence.

Repo popularitycaution

The repository has only 2 stars, 0 forks, and 0 watchers. Low popularity is supporting evidence rather than a verdict, but it means less visible community validation and fewer likely external maintainers.

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tool was detected. The absence of scanning is a hygiene gap rather than evidence that the package is unsafe.

Token permissionscaution

All five analyzed workflows lack top-level permissions declarations. No workflow requests top-level write permissions, but explicit least-privilege settings would provide stronger CI safety.