directorytree/opensearch-adapter

Repo bus factorcaution

All 12 recent commits came from one contributor, leaving maintenance dependent on a single active developer. Organization ownership provides some handoff capacity but does not remove the current concentration.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so users are given no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings, and one scopes permissions at job level. All five action references are unpinned, which weakens build reproducibility and supply-chain hygiene.