slim/csrf

Maintainerscaution

Only one registry account has publish access, which is a limited publishing base. The organization-backed repository provides some compensation, so this is not a severe concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the release and recent push provide some evidence of ongoing care, the short-term development activity is quiet.

Security policycaution

No security policy is present in the repository, reducing transparency about vulnerability reporting and response procedures.

Workflow auditcaution

The single workflow was fully analyzed with no detected sinks or high-confidence audit findings, and it avoids broad top-level write permissions. However, all three action references are unpinned, leaving build inputs less reproducible and exposed to upstream reference changes.