hostnet/entity-revision-component

Repo bus factorcaution

All recent commits came from one contributor, creating a narrow operational base. Organization backing provides some ability to hand off maintenance, but no second recent contributor is shown.

Repo commit activitycaution

There was one commit and one active maintainer in the last three months. Recent releases and merged pull requests compensate for the low commit volume, but the activity level remains modest.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. The missing scanning is a hygiene gap, not evidence that the package is unsafe.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response procedures.

Token permissionscaution

The repository's only workflow lacks top-level token permissions. Although no write permissions are explicitly requested, declaring least-privilege permissions would provide clearer CI security posture.