venndev/vosaka-fourotines

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern despite the recent release and push timestamps.

Repo popularitycaution

The repository has only two stars, zero forks, and zero watchers, providing little evidence of broad external use or review.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool is configured. That weakens ongoing supply-chain hygiene, though it is not evidence that the release is malicious.

Security policycaution

No security policy is present in the repository, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no high-confidence audit findings and no untrusted triggers or sinks, but all three action references are unpinned. The missing top-level permissions block is acceptable on its own, while unpinned actions remain a workflow hygiene concern.