horde/spellchecker

Repo bus factorcaution

All three recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second contributor was active in the measured period, so maintenance concentration remains a concern.

Repo commit activitycaution

The repository had three commits in the last three months, showing recent activity, but the pace is modest for a maintained library. This is a mild maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy. That leaves vulnerability-reporting expectations unclear and modestly reduces project transparency.

Workflow auditcaution

Both workflows were analyzed without failed files or high-confidence findings, and one scopes permissions at job level. However, six of seven action references are unpinned, so workflow inputs are not reproducibly constrained.