dpc-sdp/tide

Repo bus factorcaution

One contributor made all recent commits, creating concentration risk; the organization-owned repository provides some capacity to hand maintenance off.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, indicating limited recent development activity despite the strong registry release cadence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a repository hygiene gap.

Security policycaution

No repository security policy was found, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

All three workflows were analyzed without untrusted checkout or script-injection findings, but all six action references are unpinned and three high-confidence medium findings report inherited secrets in reusable workflows.