fgtclb/academic-study-plan

Repo bus factorcaution

One contributor made 100% of the 42 recent commits. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded 42 commits in the last 3 months, indicating strong recent activity, although all commits came from one active maintainer.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Workflow auditcaution

Both workflows were analyzed and avoid untrusted checkouts, script injection, and broad top-level write permissions. However, all 4 action references are unpinned, and the audit reports two high-confidence template-injection findings in the publish workflow; these are workflow hygiene concerns rather than standalone proof of unfitness.