cobweb/svconnector

Repo bus factorcaution

All recent commits came from one contributor, leaving no demonstrated contributor redundancy in the measured period. Organization backing provides some continuity, but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, from one active maintainer. Recent maintenance is therefore limited, despite the package having released during the period.

Repo toolingcaution

The repository uses Composer and Make for build work, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than a standalone severe risk.

Security policycaution

The repository has no published security policy. That reduces transparency for reporting and handling vulnerabilities, although it does not by itself indicate abandonment.

Workflow auditcaution

Both workflows were analyzed successfully with no reported audit findings or dangerous untrusted triggers. However, all five referenced actions are unpinned, leaving builds exposed to upstream action changes.