fgtclb/file-required-attributes

Repo bus factorcaution

All 13 recent commits came from one contributor, creating a real continuity risk. The organization-owned repository provides some backing, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and hygiene gap rather than evidence of abandonment.

Workflow auditcaution

All three workflows were analyzed without high- or medium-severity findings, and none use dangerous untrusted triggers or script-injection sinks. However, all three action references are unpinned, leaving a mild reproducibility and supply-chain hygiene concern.