davekellam/dont-mess-up-prod

Repo bus factorcaution

All 4 recent commits came from one contributor, so maintenance depends entirely on a single person and has limited handoff resilience.

Repo toolingcaution

Composer build tooling is used, but no security-scanning tools were detected; this leaves a meaningful project hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

All 10 analyzed action references are unpinned, which weakens build reproducibility and action supply-chain control. Read-only or job-level permissions, complete analysis, and no dangerous workflow findings provide partial compensation.