2lenet/config-bundle

Repo bus factorcaution

One contributor made 100% of the six recent commits. The organization-owned project provides some handoff capacity, but recent maintenance remains highly concentrated.

Repo commit activitycaution

Six commits were made in the last 3 months, showing current activity. However, all activity came from one active maintainer, limiting resilience if that person stops contributing.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected. This is a modest transparency and assurance gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. For a maintained library this reduces clarity about vulnerability reporting and response expectations.

Workflow auditcaution

All three workflows were analyzed successfully with no high-confidence audit findings or untrusted checkouts. However, all 9 action references are unpinned, leaving build inputs less reproducible; the lack of top-level permissions is acceptable on its own.