intervention/gif

Repo bus factorcaution

All 2 recent commits came from one active maintainer, creating a concentrated maintenance path; organization backing provides some handoff capacity but does not remove the concentration.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, showing light recent development even though registry releases remain active.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

The workflow audit was complete, found no dangerous triggers or audit findings, and uses read-only permissions; however, both analyzed actions are unpinned, which is a minor reproducibility and supply-chain hygiene gap.