ipiner/pin

Project backingcaution

The repository is owned by a personal user account rather than an organization, so the single-contributor concentration is not visibly compensated by organizational backing.

Repo bus factorcaution

All 28 recent commits came from one contributor, giving the project a high bus-factor risk despite the active commit pace.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a meaningful maintenance and supply-chain hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerability reports are handled; the absence of scanning tools reinforces this gap.

Workflow auditcaution

Both workflows were analyzed cleanly with no reported audit findings or untrusted checkout and injection patterns, but all 6 action references are unpinned, weakening build reproducibility.