fivelab/migrator

Repo bus factorcaution

All recent commits came from one contributor, creating concentration risk; organization ownership provides some ability to hand maintenance to others.

Repo commit activitycaution

Only one commit was recorded in the last three months and one maintainer was active, which is a modest maintenance concern despite the recent release activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving automated security coverage unclear.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all six action references are unpinned, which weakens build reproducibility and supply-chain hygiene.