jweiland/circular

Repo bus factorcaution

All recent commits came from one contributor. The organization-owned repository provides some handoff capacity, but the observed activity remains concentrated.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, with one active maintainer. That is limited recent activity and lowers confidence in sustained maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and hygiene gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy. That leaves vulnerability-reporting and response expectations unclear, although it does not by itself indicate abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no high- or medium-confidence findings and no untrusted checkout or script-injection sinks. However, its one action reference is unpinned, which weakens build reproducibility.