kevinchappell/form-builder

Project backingcaution

The package and repository are owned by the same individual account, so the project is directly aligned but lacks organizational handoff capacity.

Repo bus factorcaution

Three contributors were active, but the top contributor made 80% of recent commits, leaving maintenance substantially concentrated in one person.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools were detected; this is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so there is no documented route for reporting or coordinating vulnerability fixes.

Workflow auditcaution

All four workflows were analyzed without failed files, dangerous sinks, or audit findings, and permissions are not broadly writable. However, all nine action references are unpinned, weakening build reproducibility and update safety.