tsugi/lib

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning, although the recent release history and non-archived organization-owned project provide some compensation.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, and no pull requests are open. Combined with zero recent commits, this suggests limited visible project activity.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools were detected. The missing automated security check modestly reduces transparency and vulnerability-response confidence.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and response expectations undocumented, which is a maintenance and transparency gap.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous audit findings or untrusted triggers, but both action references are unpinned. That is a supply-chain hygiene weakness without evidence of an active workflow exploit.