langleyfoxall/math_eval

Release historycaution

The project has existed for about eight years but has only four releases, with a typical gap of about 11 months; one release in the last year shows it is not abandoned, but maintenance is infrequent.

Repo bus factorcaution

All two recent commits came from one contributor, leaving maintenance dependent on a single active person; organization backing provides some capacity for handoff but does not remove the concentration concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so users have no documented reporting path for vulnerabilities.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, which weakens build reproducibility and supply-chain hygiene.