sweetrdf/term-templates

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. This suggests limited current development activity, though the release history shows recent publishing.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That is a modest transparency and maintenance-hygiene gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although the package's tests, documentation, and recent releases provide compensating project evidence.

Workflow auditcaution

The single workflow was fully analyzed with no detected untrusted checkouts, script injection, or audit findings. However, all six action references are unpinned, which leaves avoidable update-integrity risk; the missing top-level permissions block is acceptable on its own.