xoops/moduletools

Release historycaution

This is the package's first registry release, published today, so there is no demonstrated release history or long-term maintenance pattern yet.

Repo bus factorcaution

All recent commits came from one contributor. Organization backing reduces the concern somewhat, but no second active contributor is shown to provide current handoff resilience.

Repo commit activitycaution

Only one commit was recorded in the last three months, and only one maintainer was active during that period; this is limited evidence of sustained maintenance for a newly published package.

Workflow auditcaution

All three workflows use read-only permissions and have no untrusted checkouts, script injection, or high-confidence audit findings. However, six of seven action references are unpinned, leaving avoidable build-integrity risk.