silpo-tech/mapper-bundle

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which leaves recent maintenance capacity unproven despite the recent release.

Repo popularitycaution

The repository has zero stars and one fork, so there is little visible community adoption or outside support; this is supporting caution rather than a verdict by itself.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tool was detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, making the process for reporting and handling vulnerabilities unclear.

Workflow auditcaution

The single workflow was fully analyzed and has job-level permission scoping with no detected injection or high-severity findings, but all 10 action references are unpinned, weakening build reproducibility and supply-chain controls.