christian-riesen/base32

Repo bus factorcaution

Two contributors were active recently, but one authored 80% of the commits, leaving maintenance somewhat concentrated for this user-owned project.

Repo toolingcaution

The project uses Composer build tooling, but no security-scanning tooling was detected. This is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, injection findings, or excessive token permissions. However, all nine action references are unpinned, which weakens build reproducibility and action supply-chain hygiene.