laminas/laminas-validator

Repo bus factorcaution

All recent repository commits came from one contributor, creating concentration risk. Organization ownership provides some handoff capacity, so this is a caution rather than a severe dependency risk.

Repo commit activitycaution

Only one commit from one active maintainer was recorded in the last three months, indicating sparse recent development activity despite the recent package release.

Repo issue activitycaution

There are 17 open issues and 3 open pull requests, but no issues or pull requests were opened or closed in the last month. This suggests limited current interaction and is a maintenance caution, though the recent release history compensates somewhat.

Repo toolingcaution

The repository uses Make and Composer for builds, but no security scanning tools were detected. The established build tooling and other repository controls partly compensate for this coverage gap.

Token permissionscaution

Three workflows omit top-level token permissions and one workflow requests top-level write access. This weakens least-privilege transparency even though dangerous workflow patterns were not detected.