lekoala/spread-compat

Repo bus factorcaution

All 14 recent commits came from one contributor, leaving maintenance dependent on a single individual and increasing continuity risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and assurance gap.

Security policycaution

The repository has no published security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all eight action references are unpinned, weakening build reproducibility.