cycle/schema-builder

Repo bus factorcaution

All two recent commits came from one contributor, leaving limited demonstrated short-term contributor depth; organization backing partly compensates for this concentration.

Repo commit activitycaution

There were two commits in the last 3 months, so the project is not inactive, though the pace is modest for a maintained library.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities, although Psalm scanning provides some compensating security practice.

Workflow auditcaution

All 7 workflows were analyzed with no dangerous sinks or audit findings, but all 16 action references are unpinned, weakening build reproducibility and update integrity.