stilling/zpl-renderer

Release historycaution

This package is only 1 day old and has released three versions in that time. That shows active initial iteration, but provides almost no evidence of sustained maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a transparency and maintenance gap for a package intended for direct dependency use.

Security policycaution

The repository has no security policy. This is a modest disclosure and maintenance gap, though the project is very new and no other security issue was reported here.

Version stabilitycaution

Version v0.2.0 is not a stable major release, so the public API may still change even though it is not marked as a prerelease.

Workflow auditcaution

The workflow is fully analyzed and uses read-only permissions with no reported dangerous findings, but both of its two action references are unpinned, leaving them exposed to upstream changes.