chrisjohnleah/joblogic-api

Release historycaution

The package is only 41 days old and has two releases, both published on the same day, so its longer-term maintenance pattern is not yet established.

Repo bus factorcaution

One contributor made all 17 recent commits, leaving no demonstrated maintainer redundancy and increasing abandonment or handoff risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and monitoring gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

All workflows were analyzed with no dangerous audit findings, no untrusted checkout or script injection, and no write-wide token permissions. Both referenced actions are unpinned, which is a minor reproducibility and supply-chain hygiene weakness.