featurevisor/featurevisor-php

Repo bus factorcaution

All five recent commits came from one contributor, concentrating maintenance knowledge and increasing continuity risk; organization backing partly offsets that risk.

Repo popularitycaution

The repository has three stars and one fork, indicating a small user and contributor footprint; this is supporting caution rather than a health verdict by itself.

Security policycaution

No repository security policy was found, leaving disclosure and response expectations undocumented; this is a transparency gap but not evidence of abandonment.

Workflow auditcaution

All 13 analyzed action references are unpinned, which weakens build reproducibility. The audit also found a high-confidence template-injection pattern, but no untrusted checkout or script-injection trigger was reported, so this remains a workflow hygiene concern rather than a severe standalone risk.