ez-php/feature-flags

Repo bus factorcaution

All 78 commits in the past three months came from one contributor, leaving maintenance dependent on a single person. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a hygiene and maintenance gap rather than evidence that the package is unsafe.

Workflow auditcaution

The only workflow was fully analyzed and has no untrusted checkout, injection, or high-confidence audit findings, with job-level permissions scoped. However, all 8 action references are unpinned, which weakens build reproducibility and update safety.