dereuromark/cakephp-feedback

Repo bus factorcaution

One contributor made all commits in the last 3 months. Because the repository owner is an individual rather than an organization, this creates a meaningful continuity risk.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, which is limited activity, though the recent release history shows the project has not stopped evolving.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The absence lowers security-process transparency without showing abandonment by itself.

Security policycaution

The repository has no security policy, leaving the project's vulnerability-reporting process unclear. The documented security fixes in this release provide some compensating evidence but do not replace a policy.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but its container image is high-confidence and unpinned; all 7 action references are also unpinned. This is a workflow hygiene and reproducibility concern, not a standalone adoption blocker.