kislayphp/config

Repo bus factorcaution

One contributor made all recent commits, leaving maintenance dependent on a single active individual despite the repository being organization-owned.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, indicating light recent development activity for a package released five times in the last year.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Workflow auditcaution

The audit completed cleanly with no untrusted-checkout or script-injection findings, but all 9 analyzed action references are unpinned and one workflow grants top-level write permissions.