sirbrillig/spies

Repo commit activitycaution

There were no commits and no active maintainers in the three months before collection. Although a recent release provides some compensating evidence, this indicates currently quiet maintenance.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected. For a small library this is a hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both action references are unpinned, so their contents can change over time.