jane-php/json-schema-runtime

Repo bus factorcaution

All 6 recent commits came from one contributor, creating a meaningful continuity risk; organizational backing partly compensates because maintenance can be handed off.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and hygiene gap.

Security policycaution

The repository has no published security policy, so users lack a documented process for reporting vulnerabilities.

Workflow auditcaution

The single workflow was fully audited with no findings and no untrusted checkout or script-injection issues. Its one action reference is unpinned, which is a minor reproducibility and supply-chain hygiene gap.