kislayphp/metrics

Repo bus factorcaution

All five recent commits came from one contributor, leaving a significant continuity risk if that person becomes unavailable. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

There were five commits in the last three months, so maintenance has not stopped, although activity is modest for a young package.

Repo toolingcaution

The repository uses a build tool, but no security-scanning tools were detected. For a native PHP extension, this leaves security and build-quality checks less visible than they could be.

Security policycaution

No repository security policy was found, which makes vulnerability reporting and coordinated response less transparent.

Token permissionscaution

One workflow has no top-level token permissions and another grants top-level write access. The workflows show no dangerous checkout or script-injection patterns, but the permission configuration is not consistently least-privilege.