davidhirtz/yii2-config

Project backingcaution

The repository is owned by an individual rather than an organization, so the concentrated contributor activity represents a meaningful continuity risk.

Repo bus factorcaution

Two contributors were active, but one made 42 of 45 recent commits, leaving maintenance heavily concentrated in one person.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted execution paths, but its only action reference is unpinned, which weakens build reproducibility.