componenta/cqrs-policy

Repo bus factorcaution

One contributor made 100% of the 133 recent commits. Organization ownership provides some handoff capacity, but no second active contributor is shown, so maintenance continuity remains a concern.

Repo commit activitycaution

The repository recorded 133 commits in three months, demonstrating strong recent activity. However, all activity came from one maintainer, which limits resilience.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and assurance gap, not evidence of a defect by itself.

Security policycaution

The repository has no security policy. For a middleware package involved in policy enforcement, this leaves vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

The workflow audit completed successfully, found no injection or high-severity findings, and one workflow uses read-only permissions. However, all 12 action references are unpinned, leaving builds exposed to upstream reference changes.