horde/translation

Repo bus factorcaution

One contributor made all three commits in the last three months. The organization-owned repository provides some handoff capacity, but recent work remains concentrated in one person.

Repo commit activitycaution

Three commits were made in the last three months, showing some recent activity, but the pace is modest for an actively maintained library. This is a minor maintenance caution rather than abandonment evidence.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected. The absence of automated security scanning is a transparency and hygiene gap, not evidence of an unsafe release.

Security policycaution

The repository has no security policy. That leaves vulnerability-reporting expectations unclear, although the active organization-backed project and recent release activity partly offset the gap.

Workflow auditcaution

All three workflows were analyzed without high- or medium-severity findings, and one scopes permissions at job level. However, seven of nine action references are unpinned, creating a workflow reproducibility and supply-chain hygiene caution.