berry/html

Repo bus factorcaution

One contributor made all five commits in the last three months, creating a meaningful continuity risk. Organization backing partly compensates by providing a potential handoff path.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving security-focused maintenance less visible.

Security policycaution

The repository has no security policy, making vulnerability reporting and response expectations less transparent.

Version stabilitycaution

v0.15.0 is not a stable major release, so its pre-1.0 status leaves more room for breaking changes despite no recent prerelease versions.

Workflow auditcaution

Both workflows were analyzed successfully with no untrusted checkouts, script injection, or high-severity findings. However, all four action references are unpinned, which weakens build reproducibility and supply-chain hygiene.