setono/consent-contracts

Release historycaution

The package has six releases since April 2021, but none in the last 12 months and its latest release was in December 2024. This indicates a long maintenance pause for a still-published dependency.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a minor hygiene gap rather than a severe supply-chain concern.

Security policycaution

The repository has no security policy, which is a modest transparency gap for reporting vulnerabilities, though it is not evidence of a direct dependency or maintenance failure.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 16 action references are unpinned, leaving the build exposed to changes in referenced action versions.