leafs/inertia

Repo bus factorcaution

All 11 recent commits came from one contributor, creating a meaningful continuity risk. The organization-owned repository provides some compensation because maintenance can potentially be handed off internally.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and hygiene gap, not evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This lowers transparency but is not by itself a dependency-blocking risk.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkouts, script injection, or audit findings. Both action references are unpinned, which weakens build reproducibility and merits a hygiene caution.