ltb-project/ltb-common

Repo bus factorcaution

Only one contributor made recent commits, with that contributor responsible for 100% of the last three months' commits; organizational backing partly offsets this concentration but does not remove the continuity risk.

Repo commit activitycaution

The repository recorded 8 commits in the last 3 months, showing ongoing work, though all recent commits came from one active maintainer.

Repo toolingcaution

Composer is used for the build, but no repository security scanning tools were detected, leaving dependency and code issues with less automated coverage.

Security policycaution

The repository has no security policy, so the process for reporting and handling vulnerabilities is not documented.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, injection findings, or high-severity audit results, and one workflow has read-only permissions. However, all 5 action references are unpinned, which weakens build reproducibility and supply-chain integrity.