xibosignage/xibo-xmr

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. This conflicts with the recent release and August push, but still indicates currently quiet development.

Repo issue activitycaution

There are no open issues and four open pull requests, with no issues or pull requests merged in the last month. The absence of issue backlog is positive, but the unmerged pull requests suggest limited recent activity.

Repo toolingcaution

Composer and Box provide build tooling, but no security scanning tools were detected. This is a transparency and maintenance gap for a packaged application.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented.

Token permissionscaution

Both analyzed workflows lack top-level token permissions declarations. No workflow requests top-level write access, which limits the concern, but explicit least-privilege configuration is still absent.