vheissu/ci-smarty

Release historycaution

This is the package's first release, published today, so there is no release track record yet. That limits confidence in long-term maintenance but is not evidence of abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. Because the release itself is new, this may reflect timing, but ongoing maintenance is not yet demonstrated.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. This is a meaningful hygiene gap for a package intended to be installed as a dependency.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no reported dangerous findings. However, both action references are unpinned, leaving avoidable workflow supply-chain exposure.