silvershop/coloredvariations

Repo commit activitycaution

No commits and no active maintainers were recorded in the last 3 months, which is a maintenance concern. A release and merged pull request in the last month provide some recent activity but do not fully remove the concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. For a small package this is a modest transparency and hygiene gap, not a severe dependency risk by itself.

Security policycaution

The repository has no security policy. This is a minor disclosure and maintenance gap for a small module, rather than evidence that the release is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injection findings, or high-severity issues. However, all three action references are unpinned, so CI is exposed to avoidable action-version drift.