cycle/database

Repo bus factorcaution

All six recent commits came from one contributor, creating a meaningful short-term concentration risk. Organization ownership provides some backing, but no second recent contributor is shown.

Repo commit activitycaution

Six commits were made in the last three months, so activity continues, but only one maintainer was active during that period.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and assurance gap.

Workflow auditcaution

All eight workflows were analyzed with no high-confidence audit findings or untrusted checkout and script-injection patterns. However, all 20 action references are unpinned, which weakens build reproducibility.