fgtclb/academic-persons-sync

Repo bus factorcaution

All 25 recent commits came from one contributor, creating a real continuity risk. Organizational ownership provides some maintenance capacity, but no second active contributor is shown in this period.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and assurance gap.

Token permissionscaution

Neither workflow declares top-level token permissions, and only one uses job-level permissions; explicit least-privilege defaults would make the release process more transparent and safer.