valb/eco

Release historycaution

Six releases arrived over roughly 9 days, showing recent publishing activity, although the short history provides limited evidence of long-term maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, which is a meaningful maintenance concern for a young library.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities.

Workflow auditcaution

Both workflows were analyzed without high-confidence findings or unsafe triggers, but all 7 action references are unpinned and one workflow grants top-level write access, creating avoidable supply-chain and permission hygiene risk.