supseven/supi

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the three months before collection. This weakens evidence of ongoing development, although the recent release and push provide some compensation.

Repo toolingcaution

The project uses Composer and make, but no security scanning tools were detected. That leaves a meaningful maintenance and vulnerability-monitoring gap.

Security policycaution

The repository has no security policy, making the process for reporting and handling vulnerabilities unclear.

Workflow auditcaution

All nine analyzed action references are unpinned, which weakens build reproducibility and exposes workflows to moving dependencies. The audit found no untrusted checkout, script injection, or high-severity findings, and the lack of top-level permissions is acceptable on its own.