chrisjohnleah/bigchange-api

Release historycaution

The package is only 41 days old and has two releases, both published on the same day, so there is little evidence of sustained maintenance yet.

Repo bus factorcaution

One contributor made all 15 recent commits, leaving no demonstrated handoff capacity if that maintainer becomes unavailable.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, reducing automated coverage for dependency or code risks.

Security policycaution

The repository has no security policy, so users have no documented vulnerability-reporting process or response expectations.

Workflow auditcaution

The only workflow was fully analyzed with no injection or high-severity findings, but both action references are unpinned, making workflow dependencies less reproducible.