horde/stream

Repo bus factorcaution

All three recent commits came from one contributor, creating a narrow operational fallback; organization ownership provides some capacity to hand maintenance off.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities.

Workflow auditcaution

Both analyzed workflows completed without reported audit findings, and one scopes permissions at job level. However, 6 of 7 action references are unpinned, a reproducibility and update-hygiene concern.