fivelab/ruler

Repo bus factorcaution

All 36 recent commits came from one contributor, giving the project a very low recent bus factor. Organization ownership provides some handoff capacity, but no second recent contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The repository's SECURITY.md partly improves disclosure transparency, but automated scanning coverage is limited.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkouts, script injections, or high-confidence audit findings. However, all six action references are unpinned, which leaves the build exposed to action-reference drift.