xaraya/core

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the frequent registry releases provide partial counterevidence.

Security policycaution

The repository has no security policy file. For a core web framework, the absence reduces transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but both actions are unpinned and one uses an archived repository. The workflow also lacks a top-level permissions block, which is acceptable on its own but leaves weaker explicit scoping.