horde/compress_fast

Repo bus factorcaution

All 3-month commit activity came from one contributor, giving the project a concentrated short-term bus factor. Organization backing provides some handoff capacity, so this is a maintenance caution rather than a severe risk.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, showing limited recent development activity. The recent release and push provide some compensation, but maintenance momentum is still thin.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanner reduces assurance about automated security checks without indicating abandonment.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it does not by itself show that the package is unsafe.

Workflow auditcaution

Both workflows were analyzed with no high- or medium-confidence findings, no untrusted checkouts, and no script-injection sinks. However, 6 of 7 action references are unpinned, which leaves workflow dependencies exposed to moving upstream code; organization backing and the clean audit partly offset this hygiene gap.