donatj/phpuseragentparser

Repo bus factorcaution

All recent commits came from one contributor, with a 100% top-contributor share. That concentration creates a real continuity risk despite the recent activity.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, but it is not severe enough to outweigh the active project evidence.

Workflow auditcaution

Both workflows were analyzed without high- or medium-severity findings, and no untrusted checkout or script-injection paths were found. However, all five action references are unpinned and one workflow grants top-level write permissions, creating moderate supply-chain hygiene concerns.