leafs/queue

Repo bus factorcaution

One contributor made all seven recent commits, leaving limited demonstrated handoff capacity. Organization ownership partly offsets that concentration but does not provide evidence of a second active maintainer.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest repository hygiene gap.

Workflow auditcaution

Both workflows were fully audited with no dangerous triggers, untrusted checkouts, script injection, or findings. However, all four action references are unpinned, reducing build reproducibility and supply-chain resilience.