chrome-php/wrench

Repo bus factorcaution

Two contributors were active, but one made 11 of 12 recent commits, giving that contributor a 92% share. Organization backing partly offsets the concentration, but continuity still depends heavily on one person.

Repo toolingcaution

The project uses Make and Composer for builds, but no security-scanning tool was detected. The missing scanner is a modest transparency and hygiene gap, not evidence of unsafe code.

Security policycaution

The repository has no security policy. This leaves vulnerability-reporting expectations unclear for a network-facing WebSocket library.

Workflow auditcaution

Both workflows use read-only permissions and the audit found no injection or other high-confidence findings, but all 16 action references are unpinned. That weakens build reproducibility and supply-chain hygiene without creating a severe risk on its own.