horde/injector

Repo bus factorcaution

All recent commits come from one contributor. Organization ownership provides some handoff capacity, but no second recent contributor is shown to share maintenance responsibility.

Repo commit activitycaution

Two commits were made in the last three months by one active maintainer, which confirms recent activity but indicates a thin maintenance base.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest gap in repository hygiene.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a dependency library.

Workflow auditcaution

Both workflows were analyzed cleanly with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Two of four action references are unpinned, a minor reproducibility and supply-chain hygiene gap.