sitegeist/csvpo

Repo commit activitycaution

No commits and no active maintainers were recorded in the past three months. This is a meaningful maintenance warning, although the recent release history and same-day repository push provide partial compensation.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. This is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This lowers transparency but is not severe enough to make the release unfit on its own.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, both action references are unpinned, which weakens build reproducibility and supply-chain hygiene.