jaxon-php/jaxon-attributes

Repo bus factorcaution

All 4 recent commits came from one contributor, creating a maintenance concentration risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

There were 4 commits in the last 3 months, so activity has not stopped, but it is modest and comes from only one active maintainer.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a security-hygiene gap without evidence of an immediate defect.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all 4 action references are unpinned, weakening build reproducibility.