besmartand-pro/bsap-account-bundle

Repo bus factorcaution

One contributor made all commits in the last three months, creating a concentrated maintenance dependency. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, so current development activity is limited despite the recent release history.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest source-maintenance gap.

Security policycaution

The repository has no security policy, making vulnerability reporting and response expectations less transparent to users.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned. That leaves avoidable build-integrity risk even though permissions are not broadly writable.