componenta/cqrs-transport-cycle

Repo bus factorcaution

All 41 recent commits came from one contributor, creating a meaningful continuity risk despite the repository being organization-owned.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less clear.

Workflow auditcaution

The sole workflow was fully analyzed, uses read-only permissions, and has no audited findings, but all 13 action references are unpinned, weakening build reproducibility and update control.