six-it/newsletter-bundle

Release historycaution

This package has only one release, published 247 days ago, so there is little release history to demonstrate sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, indicating maintenance has not continued after the initial release.

Repo issue activitycaution

There were no new or merged pull requests in the last month and no issue activity reported, providing little evidence of ongoing project response.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Workflow auditcaution

The audit analyzed all six workflows without failures, but found a high-confidence high-severity unpinned latest container image and all ten action references are unpinned. Pull-request workflows also perform two untrusted checkouts, increasing CI supply-chain exposure.