lindemannrock/craft-report-manager

Repo bus factorcaution

All 35 recent commits came from one contributor, concentrating maintenance risk. Organization ownership provides some backing, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest supply-chain hygiene gap, not evidence of unsafe code.

Workflow auditcaution

All three workflows were analyzed with no reported injection or high-severity findings, but all six action references are unpinned and two workflows grant top-level write permissions, creating avoidable maintenance and workflow-integrity risk.