cognesy/instructor-setup

Repo bus factorcaution

One contributor made all 13 commits in the last 3 months, so maintenance continuity is concentrated despite the repository belonging to an organization.

Repo commit activitycaution

The repository recorded 13 commits in the last 3 months, showing recent activity, but only one active maintainer produced them.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so users have no documented channel or process for reporting vulnerabilities.

Workflow auditcaution

The sole workflow uses a pull_request_target trigger without an observed untrusted checkout or script injection, but its one action is unpinned, weakening build reproducibility.