chamber-orchestra/pagination-bundle

Maintainerscaution

Only one registry account has publish access. The repository is organization-owned, which partly compensates for limited registry publishing access, but does not remove release continuity risk.

Repo bus factorcaution

One contributor made all three commits in the last three months. Organization backing provides some handoff capacity, but current work still has a very narrow individual base.

Repo commit activitycaution

Three commits were made in the last three months, so maintenance is present but relatively light for a package with ongoing releases.

Security policycaution

The repository has no security policy, leaving disclosure and response expectations undocumented for users and maintainers.

Workflow auditcaution

Both workflows were fully audited with no high-confidence findings, unsafe untrusted checkouts, or script injection. However, all four action references are unpinned and one workflow has top-level write permissions, creating moderate reproducibility and token-scope concerns.