componenta/app-roadrunner

Release historycaution

Six releases in 41 days show active publishing, but the short history provides limited evidence of long-term maintenance.

Repo bus factorcaution

One contributor made all 10 recent commits, creating a meaningful continuity risk; organization ownership offers some ability to hand off maintenance but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest assurance gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

The only workflow uses read-only permissions and has no untrusted sinks or audit findings, but all three analyzed action references are unpinned, weakening build reproducibility and trust in workflow dependencies.