backslashphp/backslash

Repo bus factorcaution

All 20 recent commits came from one contributor, creating concentration risk. The organization-owned project provides some handoff capacity, so this is a caution rather than a severe risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, which makes vulnerability-reporting expectations less clear for consumers.

Workflow auditcaution

The single workflow grants top-level write permissions and all four referenced actions are unpinned. The audit found no untrusted checkout, injection, or other high-confidence dangerous workflow finding, limiting this to a hygiene caution.