fof/username-request

Repo bus factorcaution

One contributor made all recent commits, concentrating short-term maintenance responsibility; organization ownership provides some capacity to hand work off, but no second recent contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, so recent development activity is thin even though the package has released recently.

Repo toolingcaution

The project uses Composer, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Version stabilitycaution

This release is a beta, which adds some adoption risk, although prereleases represent only 15% of recent versions and the major version is established.

Workflow auditcaution

All three workflows were analyzed without dangerous triggers or audit findings, and none grants top-level write access. However, all 3 of 3 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.