gemorroj/stop-spam

Repo bus factorcaution

All one recent commit came from a single contributor, so maintenance depends heavily on one person and has limited demonstrated backup.

Repo toolingcaution

Composer build tooling is present. No security-scanning tool is configured, a minor transparency gap for a dependency distributed to other projects.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, which weakens build reproducibility and supply-chain hygiene.