ctw/ctw-middleware-pagecache

Repo bus factorcaution

All 30 recent commits came from one contributor, leaving maintenance dependent on a single active person and creating limited handoff resilience.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, reducing clarity about how vulnerabilities should be reported and handled.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no detected audit findings or untrusted sinks. However, its only action reference is unpinned, so dependency updates are less controlled.