cognesy/instructor-http-client

Repo bus factorcaution

All 18 recent commits came from one contributor, leaving maintenance highly concentrated; organizational backing helps with handoff potential but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent for a transport library.

Workflow auditcaution

The single workflow uses a pull_request_target trigger without an untrusted checkout or script-injection sink, but its only action reference is unpinned, reducing workflow reproducibility.