horde/view

Repo bus factorcaution

All three recent commits came from one contributor, creating a concentrated maintenance base. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded three commits in the last three months, showing recent activity but at a low volume. That supports maintenance, while the limited pace keeps the assessment below a fully healthy score.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool is reported. For a library, this is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and response expectations undocumented, which is an avoidable transparency gap for a reusable library.

Workflow auditcaution

Both analyzed workflows completed the audit without findings or untrusted checkout and script-injection patterns, and one scopes permissions at job level. However, six of seven action references are unpinned, leaving a meaningful workflow reproducibility and supply-chain hygiene gap.