glaivepro/iaafpoints

Repo bus factorcaution

All three recent commits came from one contributor, concentrating maintenance knowledge and creating a continuity concern. Organization backing provides some handoff capacity, but no second recent contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected; this is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for consumers.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all six referenced actions are unpinned, which weakens build reproducibility and workflow supply-chain hygiene.