coldtrick/group_tools

Repo bus factorcaution

Two contributors are active, but one made about 73% of the recent commits, leaving some maintainer concentration risk; organization backing provides partial resilience.

Repo issue activitycaution

There are 8 open issues and no recent issue or pull-request activity, which is a modest transparency and responsiveness concern, although recent commits and releases provide stronger evidence of ongoing work.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling is detected, leaving a gap in the project's automated security hygiene.

Security policycaution

The repository has no security policy, so its process for receiving and communicating vulnerability reports is unclear.

Token permissionscaution

All 3 workflows omit top-level token permissions declarations, reducing explicit least-privilege guarantees even though none declares top-level write access.