componenta/router

Repo bus factorcaution

One contributor made 100% of the 13 recent commits. Organization ownership provides some handoff capacity, but no second active contributor is shown, leaving a genuine continuity risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented.

Workflow auditcaution

The workflow audit completed cleanly, uses read-only permissions, and found no high- or medium-severity issues. However, all three action references are unpinned, which weakens build reproducibility and provenance.