innmind/cli

Repo bus factorcaution

All five recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

Five commits were made in the last three months by one active maintainer, showing recent work but a narrow current maintenance base.

Repo toolingcaution

The project uses Composer and Make, but no security-scanning tools were detected, leaving a modest security-process gap.

Security policycaution

No repository security policy was found, which reduces transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

All four workflows were analyzed, but all seven action references are unpinned and three high-confidence medium-severity secrets-inherit findings expose credentials more broadly than necessary; one workflow also grants top-level write permissions.