horde/cli_modular

Repo bus factorcaution

One contributor made all commits in the last 3 months, creating a concentrated maintenance risk. Organization ownership provides some handoff capacity, but no second recent contributor is shown.

Repo commit activitycaution

Only two commits were made in the last 3 months by one active maintainer. Recent activity is present, but the low volume leaves some concern about maintenance capacity.

Repo toolingcaution

Composer is used for builds, but no security scanning tool was detected. For a small library this is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. This reduces disclosure transparency, although it does not by itself indicate that the package is unsafe to depend on.

Workflow auditcaution

All three workflows were analyzed with no injection or high-severity findings, and one scopes permissions at job level. However, 7 of 9 action references are unpinned, which weakens build reproducibility and action supply-chain hygiene.