casbin/yii-permission

Repo bus factorcaution

All five recent commits came from one contributor, leaving maintenance dependent on a single active individual despite organization backing.

Repo toolingcaution

Composer build tooling is present, but no repository security scanning tools were detected, leaving a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, which makes vulnerability-reporting expectations less clear for a security-sensitive authorization library.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all five action references are unpinned, a workflow reproducibility gap, while the absence of a top-level permissions block is acceptable on its own.