leafs/form

Repo bus factorcaution

All eight recent commits came from one contributor, creating a real continuity risk; organization backing partly compensates because maintenance can potentially be handed off.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance-hygiene gap.

Security policycaution

The repository has no security policy, so users lack a documented reporting path; this is a limited transparency concern rather than evidence of unsafe code.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, so their behavior can change unexpectedly over time.