biigle/user-storage

Repo bus factorcaution

One contributor made all 6 commits in the last 3 months, giving the project a single-person operational dependency. Organization ownership provides some handoff capacity but does not remove the concentration risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanning is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no documented security policy. This leaves vulnerability reporting and response expectations unclear for a package handling user file storage.

Workflow auditcaution

All 4 workflows were analyzed successfully with no untrusted checkouts, script injection, or audit findings. However, all 5 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.