dereuromark/cakephp-feed

Repo bus factorcaution

One contributor made all commits during the last 3 months, concentrating maintenance responsibility in a single person; the independently established project helps, but does not remove this risk.

Repo commit activitycaution

The repository recorded one commit in the last 3 months from one active maintainer. That demonstrates some current activity but is a thin maintenance signal.

Security policycaution

The repository has no security policy, which weakens the project's documented process for receiving and communicating vulnerability reports.

Workflow auditcaution

The complete audit found no dangerous triggers, untrusted checkouts, injections, or other findings, but all 7 action references are unpinned. The workflow also lacks a top-level permissions block, which is acceptable on its own.