aegisora/boolean-rule-guardian

Release historycaution

This is a young package, released once 55 days ago, so there is little release history to establish long-term maintenance. The single release is not itself abandonment evidence, but it limits maturity evidence.

Repo bus factorcaution

One contributor made all 14 recent commits, creating a concentrated maintenance dependency. Organization ownership provides some ability to hand off work, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency gap rather than a severe concern because the repository does include other quality and security documentation.

Workflow auditcaution

The single workflow was fully analyzed with no detected injection sinks or high-confidence audit findings. However, all 10 action references are unpinned, leaving avoidable build-integrity risk; the absence of a top-level permissions block is acceptable here and no write-wide token was observed.