fig-r/psr2r-sniffer

Repo bus factorcaution

One contributor made all six commits in the last three months, so maintenance depends heavily on a single active person; organization backing provides some handoff capacity but does not remove the concentration concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest gap in automated security hygiene.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.

Workflow auditcaution

The sole workflow was fully analyzed with no injection or high-severity findings, but all six action references are unpinned, reducing build reproducibility and increasing action-update risk.