soyhuce/dev-tools

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is the main maintenance caveat, although it is partly offset by the release on March 2, 2026.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanner is a process gap, not by itself evidence that the package is unsafe to depend on.

Security policycaution

The repository has no security policy, leaving reporting and response expectations undocumented. This lowers transparency but is not severe enough to make the package unfit.

Token permissionscaution

All four workflows omit top-level token permissions, but none declares top-level write access. The configuration is less explicit than ideal without showing an excessive write privilege.