jbzoo/simpletypes

Repo bus factorcaution

All two recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second recently active contributor is shown to offset the concentration.

Repo commit activitycaution

Two commits were recorded in the last three months, showing recent activity, but both came from only one active maintainer, limiting evidence of sustained maintenance capacity.

Repo toolingcaution

The repository uses Composer and Make, but no security-scanning tool was detected. That is a meaningful process gap, though it does not by itself indicate the release is unsafe.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response expectations for a library intended for direct integration.

Workflow auditcaution

The workflow was fully analyzed, uses read-only permissions, and has no untrusted checkouts or script-injection findings. However, all 9 referenced actions are unpinned, leaving workflow dependencies less reproducible.