altcha-org/altcha

Repo bus factorcaution

One contributor made all four commits in the last three months, creating a low short-term bus factor. Organization ownership provides some handoff capacity, but no second recent contributor is shown.

Repo commit activitycaution

Four commits were made in the last three months, showing recent activity, but all were made by one active maintainer. The activity is healthy but concentrated.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That leaves a meaningful transparency and maintenance-control gap for a security-sensitive library.

Security policycaution

The repository has no security policy. For a library that creates and verifies anti-abuse challenges, the absence of a documented vulnerability-reporting path is a real transparency gap.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, injection, or high-severity findings, and it avoids top-level write permissions. However, both of its action references are unpinned, leaving workflow dependencies exposed to upstream changes.