whilesmart/eloquent-customers

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, a significant warning for a package only 129 days old.

Release historycaution

The package is young at 129 days and has four releases, but its latest release was 129 days ago, leaving limited evidence of sustained maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less clear for adopters.

Workflow auditcaution

All four analyzed action references are unpinned, and two of three workflows grant top-level write permissions; no dangerous triggers or audit findings were detected, so this is a hygiene caution rather than a severe risk.