totten/git-scan

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months, which is a meaningful maintenance concern, although the recent release provides some compensating evidence.

Repo issue activitycaution

There are only three open issues, with no new or closed issues and no pull-request activity in the last month; this suggests limited current project activity but is not severe on its own.

Repo toolingcaution

The project uses Composer and Box for builds, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This lowers transparency but does not indicate abandonment by itself.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all six action references are unpinned, leaving avoidable build-reproducibility and supply-chain hygiene risk.