jeffersongoncalves/evolutionkitv5

Lifecycle scriptscaution

Composer install and update lifecycle scripts increase the amount of package code that can run during project operations, adding a modest supply-chain exposure.

Repo bus factorcaution

Two contributors are active, with the leading contributor responsible for 60% of recent commits. This is a small base, but the second contributor provides some continuity.

Workflow auditcaution

All five workflows were analyzed, all 14 action references are pinned, and no audit findings or untrusted checkout or script-injection paths were found. Two workflows grant top-level write access, which is a mild permissions concern without an untrusted trigger or sink.