horde/share

Repo bus factorcaution

All three recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

Only three commits were made in the last three months by one active maintainer. Recent work exists, but the low volume provides limited evidence of sustained maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a meaningful repository hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

Both workflows were analyzed cleanly with no dangerous triggers, untrusted checkouts, or audit findings, and one scopes permissions at job level. However, six of seven action references are unpinned, weakening build reproducibility and supply-chain hygiene.