chatflowphp/core

Release historycaution

The package is only 17 days old, with six releases clustered in that period and a median interval of 0 days. This shows active early development but provides little evidence of long-term stability.

Repo bus factorcaution

All 25 recent commits came from one contributor, leaving maintenance highly dependent on a single person. Organization backing provides some handoff capacity but does not remove the concentration risk.

Security policycaution

The repository has no security policy, leaving the process for reporting and handling vulnerabilities undocumented. This is a transparency gap for a runtime library.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injection findings, or write-wide permissions. However, all four action references are unpinned, weakening build reproducibility and supply-chain hygiene.