centamiv/vektor

Repo bus factorcaution

All two recent commits came from one contributor, so maintenance depends entirely on a single active developer.

Repo commit activitycaution

Only two commits were recorded in the last three months, indicating limited recent development activity despite the repository remaining active.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving an avoidable security-process gap.

Security policycaution

The repository has no security policy, making vulnerability reporting and response expectations less transparent.

Workflow auditcaution

The sole workflow uses top-level write permissions and all three action references are unpinned. The audit found no untrusted checkout, injection, or high-confidence workflow findings, which limits the risk to process hygiene rather than a severe exposure.