itrack/cursbnr

Repo bus factorcaution

All three recent commits came from one contributor, so maintenance depends heavily on a single person.

Repo commit activitycaution

There were three commits in the last three months, which shows some activity but remains a thin maintenance record for a young package.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and disclosure expectations are not documented.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous sinks or audit findings, but both action references are unpinned, weakening build reproducibility.