token27/nexus-ai-content

Release historycaution

This package is 127 days old and has only one release, so there is little release history to demonstrate sustained maintenance or compatibility management.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months, despite the package being published 127 days ago; this weakens evidence of ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest gap in repository security hygiene.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent for a package intended to orchestrate external AI services.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted triggers, but both of its two action references are unpinned, leaving avoidable dependency-integrity risk.