jaxon-php/jaxon-annotations

Repo bus factorcaution

All four recent commits came from one contributor, creating a real continuity risk; organization backing provides some ability to hand off maintenance but does not remove the concentration.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving automated security coverage unclear.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkout, injection, or severity findings. However, all 4 action references are unpinned, so their contents can change without a commit-level pin.