digitalelvis/neuronai-studio

Maintainerscaution

Only one account has registry publish access. Because the repository is owned by an individual rather than an organization, this leaves limited publishing redundancy.

Repo bus factorcaution

One contributor made 100% of the 288 recent commits, so the project has a fragile maintenance handoff if that contributor becomes unavailable.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest verification gap for a package with substantial runtime dependencies.

Security policycaution

The repository has no security policy, so users have no documented path for reporting vulnerabilities or understanding the project's security response.

Workflow auditcaution

All 9 analyzed action references are unpinned, and one workflow grants top-level write access; high-confidence template-injection findings are present but have no untrusted trigger or checkout corroboration, so this is workflow hygiene rather than a severe risk.