flowd/phirewall-preset-bad-ips

Repo bus factorcaution

All seven recent commits came from one contributor, creating a real continuity risk. Organization backing partly compensates because maintenance can potentially be handed off internally, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and disclosure expectations less clear for a package intended to provide security-related IP blocking.

Token permissionscaution

One workflow grants top-level write permissions while another is read-only. The write-enabled automation increases repository-token exposure, although the separate workflow analysis found no dangerous trigger or checkout pattern.

Version stabilitycaution

Version 0.2.0 is not marked as a prerelease, but the package remains below 1.0, so its API and behavior may still change more readily than those of a mature stable-major package.