keyagency/deployer-recipes

Repo bus factorcaution

All five recent commits came from one contributor, creating a meaningful continuity risk; organization ownership provides some capacity to hand maintenance off.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tool was detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

Both workflows were analyzed without high- or medium-severity findings and one uses read-only permissions, but all 3 action references are unpinned, weakening build reproducibility.