willdurand/hateoas

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release provides some compensating evidence, but the current absence of development activity is a meaningful maintenance concern.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, despite 31 open issues. This may indicate a quiet project and adds to the maintenance uncertainty alongside the lack of recent commits.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and process gap, though it is not severe enough to outweigh the recent release, tests, and established repository.

Security policycaution

The repository has no SECURITY.md or other detected security policy, leaving vulnerability reporting guidance unclear for consumers.

Token permissionscaution

Both analyzed workflows lack top-level token permissions declarations. No workflow has top-level write access, which limits the concern, but explicit least-privilege settings would improve build hygiene.