bnussbau/epaper-pipeline-php

Project backingcaution

The package and repository are owned by the same individual account, so the single-contributor concern is not offset by organization backing.

Repo bus factorcaution

One contributor made all recent commits, concentrating maintenance and review capacity in a single person.

Repo commit activitycaution

Only two commits were made in the last three months, so recent development activity is limited despite the strong release cadence.

Workflow auditcaution

All four workflows were analyzed, but all nine action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. A low-confidence-free adhoc-packages finding also shows a test workflow installs outside a lockfile.