vinou/bot-counter

Release historycaution

This is the package's first release and it was published only hours ago, so there is no history showing sustained maintenance or reliable release cadence.

Repo commit activitycaution

There were no commits in the last three months and no active maintainers in that period; because the package is only hours old, this is not evidence of abandonment but does leave maintenance capacity unproven.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool is configured; for this small package that is a transparency gap rather than a severe risk.

Security policycaution

No repository security policy is provided. This is a minor transparency gap for a small, newly released library, not evidence that it is unsafe to use.

Token permissionscaution

The workflow has no top-level token permissions declaration, so its least-privilege configuration is unclear even though it declares no write permissions.