cakedc/cakephp-uppy

Repo bus factorcaution

One contributor made all commits in the last 3 months. Organization backing reduces handoff concern somewhat, but no second recently active contributor is shown.

Repo commit activitycaution

The repository received 3 commits in the last 3 months, showing recent activity, but the volume is modest and concentrated in one active maintainer.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected. This is a modest transparency and maintenance gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The sole workflow uses two unpinned actions and has two high-confidence medium-severity secrets-inherit findings. Read-only permissions are otherwise configured, but these avoidable CI hygiene and credential-scope issues reduce supply-chain transparency.