streetmesh/protocol

Release historycaution

This is a young package, released over 31 days with 12 releases and a median interval of about 16 hours. The active cadence is encouraging, though the short history limits maturity evidence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest transparency and assurance gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less clear.

Version stabilitycaution

The assessed version is not marked prerelease, but the v0.x major version indicates an API that may still change before 1.0.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all three action references are unpinned, weakening build reproducibility.