kislayphp/discovery

Repo bus factorcaution

One contributor made all 3 commits in the last 3 months, leaving no demonstrated active handoff within the measured period; organization ownership partly offsets but does not remove this concern.

Repo commit activitycaution

Only 3 commits were made in the last 3 months, showing some recent activity but a modest maintenance pace compared with the frequent release history.

Repo toolingcaution

The project uses Composer, but no security-scanning tools were detected, leaving an avoidable gap in repository assurance.

Security policycaution

No security policy was found, which weakens the project's transparency about vulnerability reporting and response.

Workflow auditcaution

All 3 workflows were analyzed without high-confidence audit findings or untrusted sinks, but all 10 action references are unpinned and one workflow grants top-level write access, creating reproducibility and least-privilege concerns.