liberusoftware/theme-clear-signal

Repo bus factorcaution

One contributor made all 11 commits in the last three months. Organization backing provides some handoff capacity, but no second active contributor is evidenced.

Repo commit activitycaution

Eleven commits in three months show recent work, though all activity came from one active maintainer, limiting evidence of distributed maintenance capacity.

Repo toolingcaution

Composer is used for builds, but no security scanning tool was detected. This is a modest transparency and maintenance gap rather than a release-blocking issue.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All three workflows were analyzed cleanly with no untrusted checkouts, script injection, or high-severity findings. However, all three action references are unpinned, creating a workflow reproducibility and supply-chain hygiene gap.