kristijandraca/is-burner-email

Project backingcaution

The repository is owned by an individual rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.

Repo bus factorcaution

All six recent commits came from one contributor, so maintenance depends heavily on a single person and has limited handoff resilience.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency gap rather than evidence of abandonment.

Workflow auditcaution

All three workflows were analyzed without untrusted checkouts or script injection, and two scope permissions at job level. However, all 27 action references are unpinned; the low-confidence cache-poisoning finding is hygiene rather than a standalone severe risk.