genkgo/xsl

Repo bus factorcaution

All two recent commits came from one contributor, leaving maintenance dependent on a single active developer. Organization ownership provides some handoff capacity, but no second recent contributor is shown.

Repo commit activitycaution

Only two commits were recorded in the last three months, which indicates limited recent development activity even though a current release was published.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving fewer automated checks for dependency or code risks.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but both action references are unpinned, reducing build reproducibility and update integrity.