ez-php/notification

Repo bus factorcaution

All 82 recent commits came from one contributor, creating a real continuity risk. The organization-owned repository provides some ability to hand maintenance off, so this is a caution rather than a severe abandonment signal.

Security policycaution

The repository has no published security policy, which weakens the project's disclosure transparency, though active maintenance and security scanning partly offset the concern.

Workflow auditcaution

The single workflow was fully analyzed, uses job-level permissions, and has no untrusted checkout, injection, or high-confidence audit findings. However, all eight action references are unpinned, leaving avoidable build-integrity risk.