horde/url

Repo bus factorcaution

One contributor made all three commits in the last three months, leaving no demonstrated recent contributor redundancy; organization backing partly mitigates handoff risk.

Repo commit activitycaution

Three commits were made in the last three months, showing current activity, although all activity is concentrated in one active maintainer.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving repository-level automated security coverage unclear.

Security policycaution

The repository has no security policy, which weakens the documented process for reporting and handling vulnerabilities.

Workflow auditcaution

Both analyzed workflows completed the audit without dangerous triggers, untrusted checkouts, script injection, or findings. However, 6 of 7 action references are unpinned, a reproducibility and workflow supply-chain hygiene gap.