symkit/faq-bundle

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last 3 months, while its last push coincides with the initial release period. This is a meaningful maintenance concern for a package only months old.

Release historycaution

The package is 211 days old with only two releases, both published within hours of each other. This provides limited evidence of an established maintenance pattern.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security-scanning tool was detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Version stabilitycaution

Version v0.0.2 is not from a stable major version, indicating an immature API and a higher likelihood of breaking changes. It is not marked as a prerelease, which partly offsets that concern.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, script injection, or audit findings, but all 3 action references are unpinned. That weakens build reproducibility without indicating a severe workflow risk.