jaxon-php/jaxon-core

Repo bus factorcaution

All 15 recent commits came from one contributor, creating concentration risk; organization ownership provides some ability to hand maintenance off.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected, leaving a modest gap in automated security hygiene.

Security policycaution

The repository has no published security policy, which reduces transparency about vulnerability reporting and response.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 4 action references are unpinned, weakening build reproducibility and trust in action provenance.