leafs/anchor

Repo bus factorcaution

All nine recent commits came from one contributor, leaving limited demonstrated redundancy; organization ownership provides some handoff capacity but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest assurance gap for a package that handles sanitization and token generation.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a security-oriented utility.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers or audit findings, but all four action references are unpinned, which weakens build reproducibility and supply-chain hygiene.