assoconnect/php-percent-bundle

Repo bus factorcaution

One contributor made all 2 recent commits, creating a concentrated maintenance risk. Organization ownership partly helps with handoff potential, but no second active contributor is shown.

Repo commit activitycaution

There were 2 commits in the last 3 months, so activity is present but light. This mildly limits evidence of sustained maintenance capacity.

Security policycaution

No repository security policy is present. This is a transparency gap, though the available security scanning provides some compensating evidence.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but all 4 action references are unpinned and a high-confidence medium-severity finding identifies an archived action. These are workflow reproducibility and maintenance concerns.