windwalker/reactor

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, despite a recent registry release; this creates a meaningful maintenance-capacity concern.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, indicating limited visible adoption; popularity is supporting evidence, so this is a modest concern rather than a decisive risk.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool is configured, leaving automated security hygiene weaker than ideal.

Security policycaution

The repository has no published security policy, reducing transparency about how vulnerability reports are handled.

Workflow auditcaution

The sole workflow was fully analyzed with no detected injection or high-severity findings, but all three action references are unpinned; the missing top-level permissions block is acceptable on its own, while unpinned actions weaken supply-chain hygiene.