kislayphp/gateway

Repo bus factorcaution

One contributor made all eight recent commits. Organization ownership provides some handoff capacity, but no second active contributor is evidenced.

Repo commit activitycaution

Eight commits occurred in the last three months, but all activity came from one active maintainer, limiting evidence of durable maintenance capacity.

Repo toolingcaution

The project uses Composer build tooling, but no security scanning tools were detected, leaving security-quality checks less transparent.

Security policycaution

The repository has no security policy, which weakens disclosure and maintenance transparency for a gateway extension.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers or audit findings, but all 8 action references are unpinned and one workflow grants top-level write permission, creating avoidable workflow hygiene risk.