jord-jd/php-reading-time

Repo bus factorcaution

One contributor made all recent commits, leaving maintenance concentrated in a single person with no demonstrated backup.

Repo commit activitycaution

Only one commit was recorded in the past three months, so current maintenance activity is limited despite the recent release history.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected; this is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving reporting and handling expectations undocumented.

Workflow auditcaution

The workflow audit completed cleanly with no injection or high-severity findings, but both of its action references are unpinned, weakening build reproducibility and update control.