alibabacloud/cms-20240330

Repo bus factorcaution

All 12 recent commits came from one contributor, creating concentration risk. The organization-owned repository provides some handoff capacity, so this is a caution rather than a severe risk.

Repo popularitycaution

The repository has no stars or forks and only two watchers. Popularity is limited, but it is supporting evidence only and does not outweigh the strong release cadence and organizational ownership.

Repo toolingcaution

Composer is used for builds, but no security scanning tool was detected. The absence of scanning lowers repository hygiene confidence, without outweighing the active release and commit evidence.

Security policycaution

No repository security policy was found. That is a transparency gap for reporting vulnerabilities, although it does not by itself indicate abandonment.