horde/stream_wrapper

Repo bus factorcaution

All three recent commits came from one contributor, leaving recent maintenance concentrated in a single person; organization backing provides some capacity for handoff but does not remove the concentration.

Repo commit activitycaution

Three commits were made in the last three months, showing recent activity, but the volume is modest for a maintained library.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving repository security hygiene less visible.

Security policycaution

The repository has no security policy, which weakens the documented process for reporting and handling vulnerabilities.

Workflow auditcaution

The audit covered both workflows and found no dangerous triggers or findings, with job-level permissions used in one workflow. However, six of seven action references are unpinned, leaving avoidable build-provenance risk.