horde/tree

Repo bus factorcaution

All three recent commits came from one contributor, creating concentration risk; organization ownership provides some maintenance backing but no second recent contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a maintenance and supply-chain hygiene gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.

Workflow auditcaution

All three workflows were analyzed with no audit findings and no broad top-level write permissions. However, 7 of 9 action references are unpinned, weakening build reproducibility and update safety.