jweiland/clubdirectory

Repo bus factorcaution

Two contributors are active, although one accounts for 75% of recent commits. Organization backing provides some capacity for handoff, so this is only a mild concern.

Repo popularitycaution

The repository has no stars or forks and only three watchers, so external adoption evidence is limited. Popularity is supporting evidence and does not outweigh the demonstrated maintenance activity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest assurance gap.

Security policycaution

The repository has no published security policy, which makes vulnerability reporting and response expectations less transparent.

Workflow auditcaution

All two workflows were analyzed without dangerous triggers or untrusted checkouts, but all three action references are unpinned and the release workflow has high-confidence template-injection findings. These are workflow hygiene concerns rather than a severe health verdict on their own.