sweetrdf/quick-rdf

Repo commit activitycaution

No commits and no active maintainers were recorded in the last 3 months, a meaningful maintenance concern despite the recent repository push and release history.

Repo issue activitycaution

There is one open issue and no issue or pull-request activity in the last month, offering little evidence of active community maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest review and detection gap.

Security policycaution

The repository has no security policy, making vulnerability reporting and response expectations less transparent.

Workflow auditcaution

Both workflows omit a top-level permissions block and all 8 analyzed action references are unpinned. The low-confidence cache-poisoning finding is hygiene rather than a severe risk, and no untrusted checkout or script-injection sink was found.