simaocurado/starter-kit-vue-no-auth

Lifecycle scriptscaution

Four lifecycle scripts run during installation or project creation, including post-create-project-cmd; this is relevant for a scaffold because setup automation is part of its purpose, but it increases installation trust requirements.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern for a young package.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

No security policy was found in the repository, reducing clarity about how vulnerability reports would be handled.

Workflow auditcaution

The single workflow was fully analyzed with no high-confidence audit findings, but all 7 action references are unpinned, weakening build reproducibility and action supply-chain hygiene.