simonschaufi/neos-installer

Release historycaution

This package has only one release, published about four years ago, with no releases in the last 12 months. That limits evidence of ongoing maintenance, although a stable utility can remain unchanged after a complete initial release.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the last push occurring about four years ago. The repository is not archived, but there is little evidence of current maintenance.

Repo toolingcaution

Composer is used as the build tool, showing basic project tooling. No security scanning tools were detected, which is a modest hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy, reducing the transparency of vulnerability reporting and response. This is a secondary concern because the package has a clear license and a small, directly inspectable file tree.

Workflow auditcaution

The workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both analyzed action references are unpinned, leaving them exposed to upstream changes.