elasticms/xliff

Repo bus factorcaution

One contributor made 100% of the recent commits. Organization backing provides some continuity, but no second recent contributor is shown to share maintenance responsibility.

Repo commit activitycaution

Only 2 commits were made in the last 3 months by one active maintainer; this shows recent activity but a thin maintenance base.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a security-maintenance gap.

Security policycaution

The repository has no security policy, so users are given no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

The single workflow was fully audited with no findings or untrusted checkout and script-injection sinks; however, its one action is unpinned, which weakens build reproducibility. The pull_request_target trigger is ordinary and has no corroborating sink.