dakujem/migrun

Project backingcaution

The package and repository are owned by the same individual account, making the concentrated maintainer activity relevant rather than backed by a larger organization.

Repo bus factorcaution

One contributor made six of seven recent commits, so maintenance is concentrated despite a second active contributor.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected; this is a modest transparency gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear for a migration tool.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but all five action references are unpinned, weakening build reproducibility.