vitexsoftware/datamolino

Release historycaution

The package has only one release, published about 6 years ago, with no releases in the last 12 months. That is a meaningful maintenance concern, although the linked repository was pushed more recently.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. This weakens evidence of ongoing maintenance despite the repository not being archived.

Repo toolingcaution

The repository uses Composer and Make, but no security scanning tools were detected. This is a modest gap in ongoing quality and security maintenance.

Security policycaution

No repository security policy was found. This limits transparency about how vulnerabilities should be reported, though it is not by itself evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no trigger or audit findings, but both of its two action references are unpinned. That leaves build inputs less reproducible and increases workflow supply-chain exposure.