componenta/cqrs-app

Repo bus factorcaution

One contributor made 100% of the 52 recent commits. Organization backing provides some handoff capacity, but no second active contributor is shown to reduce the immediate bus-factor concern.

Repo commit activitycaution

The repository had 52 commits in the last 3 months, showing strong recent activity. However, all activity came from one maintainer, which leaves continuity dependent on a single contributor.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and assurance gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy. That leaves vulnerability-reporting and response expectations undocumented, a minor transparency concern for a dependency.

Workflow auditcaution

Both workflows use read-only permissions and the audit found no injection or high-severity findings. However, all 8 action references are unpinned, weakening build reproducibility and supply-chain integrity.