sextanet/aduana

Clear documentation, repository tests, a license, and a small runtime dependency make adoption straightforward. The automated workflows need tightening because all nine actions are unpinned and a high-confidence bot-condition finding appears alongside broad write permissions.

Latest 1.0.4

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in about 21 months and no releases in the last 12 months, which raises maintenance and abandonment concerns despite its five-release history.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months; the repository is not archived, but current maintenance activity is absent.

Security policy

No security policy is present in the repository, leaving vulnerability-reporting expectations unclear; this is a transparency gap, not evidence of unsafe code.

Workflow audit

All 9 analyzed action references are unpinned, and a high-confidence bot-condition finding appears in a workflow with broad write permissions. The pull-request trigger has no untrusted checkout or script-injection sink, limiting the impact to workflow hygiene rather than a severe risk.