javaabu/stats

Repo bus factorcaution

One contributor made all 6 recent commits. Organizational ownership provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

The repository received 6 commits in the last 3 months, showing recent activity, though all activity is concentrated in one maintainer.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are reported, leaving a modest transparency gap.

Security policycaution

The repository has no security policy file, which weakens the documented process for reporting and handling vulnerabilities in a package used inside applications.

Workflow auditcaution

The single workflow contains one script-injection finding and all 3 action references are unpinned. Because no pull-request or workflow-run trigger is reported and the audit found no severity-rated issue, this is workflow hygiene risk rather than a severe standalone concern.