horde/stream_filter

Repo bus factorcaution

All three recent commits came from one contributor, so short-term maintenance is concentrated despite the organization-owned repository.

Repo commit activitycaution

The repository had three commits in the last three months, indicating some activity, but the cadence is modest for a maintained library.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected; this is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed with no dangerous audit findings, no untrusted checkout or script injection, and one workflow using job-level permissions. However, six of seven action references are unpinned, which weakens build reproducibility.