davidhirtz/yii2-location

Repo bus factorcaution

One contributor made about 92% of the recent commits, creating meaningful concentration risk. A second active contributor provides partial compensation, so this is a caution rather than a severe abandonment signal.

Security policycaution

No repository security policy was found. This is a transparency and vulnerability-reporting gap, though it is not evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted execution paths. Its only action reference is unpinned, which is a minor reproducibility and supply-chain hygiene gap.