ez-php/bignum

Repo bus factorcaution

One contributor made 100% of the 73 commits in the last three months. Organization backing reduces handoff risk somewhat, but there is no demonstrated contributor redundancy.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though composer-audit provides some compensating security practice.

Workflow auditcaution

The one workflow was fully analyzed with no injection or high-severity findings, and jobs scope permissions, but all 8 action references are unpinned, weakening build reproducibility and update safety.