slash197/reges

Release historycaution

This is the first release, published 0 days ago, so there is no established release cadence or maintenance history yet. The repository's current documentation and tests provide some maturity evidence, but cannot prove longevity.

Repo toolingcaution

The repository uses Composer and Make, showing build tooling, but no security-scanning tools were detected. This is a modest transparency and maintenance gap, not a severe risk by itself.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and handling procedures undocumented. The clear README and test coverage help project transparency but do not replace a security policy.

Version stabilitycaution

Version v0.1.0 is not a stable major release, and the package explicitly remains in the 0.x stage. That permits API changes and raises adoption risk, although it is normal for a newly introduced package.

Workflow auditcaution

The single workflow was fully analyzed, has read-only permissions, and has no dangerous triggers, sinks, or audit findings. However, both action references are unpinned, which is a supply-chain hygiene gap.